CVE-2009-0759

Severity: medium (CVSS 6.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2009-03-03 · updated 2026-06-16
Weakness: CWE-94

Description

Multiple CRLF injection vulnerabilities in webadmin in ZNC before 0.066 allow remote authenticated users to modify the znc.conf configuration file and gain privileges via CRLF sequences in the quit message and other vectors.

Affected products

znc: through 0.062; 0.056, 0.058

References

http://osvdb.org/52295
http://secunia.com/advisories/34230
http://www.debian.org/security/2009/dsa-1735
http://www.openwall.com/lists/oss-security/2009/03/01/2
http://znc.svn.sourceforge.net/viewvc/znc/trunk/modules/webadmin.cpp?view=log&sortby=rev&sortdir=down&pathrev=1395
http://znc.svn.sourceforge.net/viewvc/znc?view=rev&sortby=rev&sortdir=down&revision=1395
http://znc.svn.sourceforge.net/viewvc/znc?view=rev&sortby=rev&sortdir=down&revision=1396
http://osvdb.org/52295
http://secunia.com/advisories/34230
http://www.debian.org/security/2009/dsa-1735
http://www.openwall.com/lists/oss-security/2009/03/01/2
http://znc.svn.sourceforge.net/viewvc/znc/trunk/modules/webadmin.cpp?view=log&sortby=rev&sortdir=down&pathrev=1395

Get alerted when CVE-2009-0759 or the next vulnerability affects your stack