Gentoo: 200903-02 High Severity: ZNC Privilege Escalation Risk

Gentoo Linux Security Advisory GLSA 200903-02 https://security.gentoo.org/ Severity: High Title: ZNC: Privilege escalation Date: March 06, 2009 Bugs: #260148 ID: 200903-02

Synopsis ======= A vulnerability in ZNC allows for privilege escalation.
Background ========= ZNC is an advanced IRC bouncer.
Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 net-irc/znc < 0.066 >= 0.066
========== cnu discovered multiple CRLF injection vulnerabilities in ZNC's webadmin module.
Impact ===== A remote authenticated attacker could modify the znc.conf configuration file and gain privileges via newline characters in e.g. the QuitMessage field, and possibly execute arbi...