What’s Vulnerable › Vulnerabilities

CVE-2009-2658

• Severity: high (CVSS 7.5 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.9% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2009-08-04 · updated 2026-06-16
• Weakness: CWE-22

Description

Directory traversal vulnerability in ZNC before 0.072 allows remote attackers to overwrite arbitrary files via a crafted DCC SEND request.

Affected products

• znc: 0.044, 0.045, 0.047, 0.052, 0.054, 0.056 (+7)

References

• http://en.znc.in/w/index.php?title=ZNC&oldid=3209#WARNING
• http://en.znc.in/wiki/ChangeLog/0.072
• http://secunia.com/advisories/35916
• http://www.debian.org/security/2009/dsa-1848
• http://www.openwall.com/lists/oss-security/2009/07/21/5
• http://znc.svn.sourceforge.net/viewvc/znc?view=rev&sortby=rev&sortdir=down&revision=1570
• https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00965.html
• http://en.znc.in/w/index.php?title=ZNC&oldid=3209#WARNING
• http://en.znc.in/wiki/ChangeLog/0.072
• http://secunia.com/advisories/35916
• http://www.debian.org/security/2009/dsa-1848
• http://www.openwall.com/lists/oss-security/2009/07/21/5

Get alerted when CVE-2009-2658 or the next vulnerability affects your stack