What’s Vulnerable › Vulnerabilities

CVE-2008-3920

• Severity: high (CVSS 7.5 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2008-09-04 · updated 2026-06-16
• Weakness: CWE-264

Description

Unspecified vulnerability in BitlBee before 1.2.2 allows remote attackers to "recreate" and "hijack" existing accounts via unspecified vectors.

Affected products

• Bitlbee: through 1.2.1; 0.71, 0.72, 0.73, 0.74, 0.74-a, 0.80 (+22)

References

• http://bitlbee.org/main.php/changelog.html
• http://secunia.com/advisories/31633
• http://secunia.com/advisories/31690
• http://secunia.com/advisories/31991
• http://security.gentoo.org/glsa/glsa-200809-14.xml
• http://www.securityfocus.com/bid/30858
• https://bugzilla.redhat.com/show_bug.cgi?id=460355
• https://exchange.xforce.ibmcloud.com/vulnerabilities/44699
• https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00045.html
• https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00335.html
• https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00692.html
• http://bitlbee.org/main.php/changelog.html

Get alerted when CVE-2008-3920 or the next vulnerability affects your stack