CVE-2008-3969

EPSS 0.81%

發布日:2008/9/11修改日:2026/4/28

也稱為:DEBIAN-CVE-2008-3969

描述

Multiple unspecified vulnerabilities in BitlBee before 1.2.3 allow remote attackers to "overwrite" and "hijack" existing accounts via unknown vectors related to "inconsistent handling of the USTATUS_IDENTIFIED state." NOTE: this issue exists because of an incomplete fix for CVE-2008-3920.

受影響套件(1)

Debian/bitlbeefrom 0, < 1.2.3-1

參考連結(1)

ADVISORYhttps://security-tracker.debian.org/tracker/CVE-2008-3969