CVE-2005-0129
konversation irc client 0.15 - Multiple Vulnerabilities
Severity Score
7.5
*CVSS v2
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
1
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
The Quick Buttons feature in Konversation 0.15 allows remote attackers to execute certain IRC commands via a channel name containing "%" variables, which are recursively expanded by the Server::parseWildcards function when the Part Button is selected.
La característica de Botones Rápidos en Konversation 0.15 permite atacantes remotos ejecutar ciertos comandos IRC mediante un nombre de canal conteniendo variables "%", con son expandidas recursivamente por la función Server::parseWildcards cuando el botón "Partir" está seleccionado.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2005-01-19 First Exploit
- 2005-01-20 CVE Reserved
- 2005-01-22 CVE Published
- 2023-12-30 EPSS Updated
- 2024-08-07 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
CWE
CAPEC
References (10)
URL | Tag | Source |
---|---|---|
http://lists.grok.org.uk/pipermail/full-disclosure/2005-January/031033.html | Mailing List | |
http://marc.info/?l=bugtraq&m=110626383310742&w=2 | Mailing List | |
http://secunia.com/advisories/13919 | Third Party Advisory | |
http://secunia.com/advisories/13989 | Third Party Advisory | |
http://securitytracker.com/id?1012972 | Vdb Entry | |
http://www.kde.org/info/security/advisory-20050121-1.txt | X_refsource_confirm | |
http://www.securityfocus.com/bid/12312 | Vdb Entry | |
https://exchange.xforce.ibmcloud.com/vulnerabilities/19025 | Vdb Entry |
URL | Date | SRC |
---|---|---|
https://www.exploit-db.com/exploits/25054 | 2005-01-19 |
URL | Date | SRC |
---|
URL | Date | SRC |
---|---|---|
http://www.gentoo.org/security/en/glsa/glsa-200501-34.xml | 2017-07-11 |
Affected Vendors, Products, and Versions
Vendor | Product | Version | Other | Status | ||||||
---|---|---|---|---|---|---|---|---|---|---|
Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
Berlios Search vendor "Berlios" | Konversation Search vendor "Berlios" for product "Konversation" | 0.15 Search vendor "Berlios" for product "Konversation" and version "0.15" | - |
Affected
|