CVE-2016-7145

Published March 7th, 2017

View on NVD ↗

CVSS v3

N/A

CVSS v2

7.5

HIGH

Affected

PROJECT

Description

The m_authenticate function in ircd/m_authenticate.c in nefarious2 allows remote attackers to spoof certificate fingerprints and consequently log in as another user via a crafted AUTHENTICATE parameter.

evilnet/nefarious2

Nefarious IRCu (Based on IRCu 2.10.12)

GitHub