Vulnerability-Lookup

CNVD-2016-07274

Vulnerability from cnvd - Published: 2016-09-06

Title

Inspircd SSL证书欺骗漏洞

Description

InspIRCd是一款可扩展的模块化的基于C++编写的用于Linux，BSD，Windows和Mac OS X系统中的互联网中继聊天（IRC）服务器。 Inspircd存在安全漏洞。攻击者可以利用此漏洞欺骗有效的证书。

Severity

中

Patch Name

Inspircd SSL证书欺骗漏洞的补丁

Patch Description

InspIRCd是一款可扩展的模块化的基于C++编写的用于Linux，BSD，Windows和Mac OS X系统中的互联网中继聊天（IRC）服务器。 Inspircd存在安全漏洞。攻击者可以利用此漏洞欺骗有效的证书。目前，供应商发布了安全公告及相关补丁信息，修复了此漏洞。

Formal description

用户可联系供应商获得补丁信息： http://www.inspircd.org/

Reference

http://www.securityfocus.com/bid/92737

Impacted products

Name
['InspIRCd InspIRCd 2.0.20', 'InspIRCd InspIRCd 2.0.19', 'InspIRCd InspIRCd 2.0.18', 'InspIRCd InspIRCd 2.0.17', 'InspIRCd InspIRCd 2.0.16', 'InspIRCd InspIRCd 2.0.15', 'InspIRCd InspIRCd 2.0.14', 'InspIRCd InspIRCd 2.0.13', 'InspIRCd InspIRCd 2.0.12', 'InspIRCd InspIRCd 2.0.11', 'InspIRCd InspIRCd 2.0.10', 'InspIRCd InspIRCd 2.0.7', 'InspIRCd InspIRCd 2.0.2', 'InspIRCd InspIRCd 2.0', 'InspIRCd InspIRCd 1.2.8', 'InspIRCd InspIRCd 1.2.7', 'InspIRCd InspIRCd 1.1.18', 'InspIRCd InspIRCd 1.1.17', 'InspIRCd InspIRCd 1.1.16', 'InspIRCd InspIRCd 1.1.15', 'InspIRCd InspIRCd 1.1.14', 'InspIRCd InspIRCd 1.1.13', 'InspIRCd InspIRCd 1.1.12', 'InspIRCd InspIRCd 1.1.11', 'InspIRCd InspIRCd 1.1.9', 'InspIRCd InspIRCd 1.1.8', 'InspIRCd InspIRCd 1.1.17', 'InspIRCd InspIRCd 1.1.7', 'InspIRCd InspIRCd 1.1.6', 'InspIRCd InspIRCd 1.1.5', 'InspIRCd InspIRCd 1.1.4', 'InspIRCd InspIRCd 1.1.3', 'InspIRCd InspIRCd 1.1.2', 'InspIRCd InspIRCd 1.1.1', 'InspIRCd InspIRCd 1.1', 'InspIRCd InspIRCd 2.0.5', 'InspIRCd InspIRCd 2.0.1', 'InspIRCd InspIRCd 1.2.0', 'InspIRCd InspIRCd 1.1.10']

Name

['InspIRCd InspIRCd 2.0.20', 'InspIRCd InspIRCd 2.0.19', 'InspIRCd InspIRCd 2.0.18', 'InspIRCd InspIRCd 2.0.17', 'InspIRCd InspIRCd 2.0.16', 'InspIRCd InspIRCd 2.0.15', 'InspIRCd InspIRCd 2.0.14', 'InspIRCd InspIRCd 2.0.13', 'InspIRCd InspIRCd 2.0.12', 'InspIRCd InspIRCd 2.0.11', 'InspIRCd InspIRCd 2.0.10', 'InspIRCd InspIRCd 2.0.7', 'InspIRCd InspIRCd 2.0.2', 'InspIRCd InspIRCd 2.0', 'InspIRCd InspIRCd 1.2.8', 'InspIRCd InspIRCd 1.2.7', 'InspIRCd InspIRCd 1.1.18', 'InspIRCd InspIRCd 1.1.17', 'InspIRCd InspIRCd 1.1.16', 'InspIRCd InspIRCd 1.1.15', 'InspIRCd InspIRCd 1.1.14', 'InspIRCd InspIRCd 1.1.13', 'InspIRCd InspIRCd 1.1.12', 'InspIRCd InspIRCd 1.1.11', 'InspIRCd InspIRCd 1.1.9', 'InspIRCd InspIRCd 1.1.8', 'InspIRCd InspIRCd 1.1.17', 'InspIRCd InspIRCd 1.1.7', 'InspIRCd InspIRCd 1.1.6', 'InspIRCd InspIRCd 1.1.5', 'InspIRCd InspIRCd 1.1.4', 'InspIRCd InspIRCd 1.1.3', 'InspIRCd InspIRCd 1.1.2', 'InspIRCd InspIRCd 1.1.1', 'InspIRCd InspIRCd 1.1', 'InspIRCd InspIRCd 2.0.5', 'InspIRCd InspIRCd 2.0.1', 'InspIRCd InspIRCd 1.2.0', 'InspIRCd InspIRCd 1.1.10']

Show details on source website

JSON

To clipboard

{
  "bids": {
    "bid": {
      "bidNumber": "92737"
    }
  },
  "cves": {
    "cve": {
      "cveNumber": "CVE-2016-7142"
    }
  },
  "description": "InspIRCd\u662f\u4e00\u6b3e\u53ef\u6269\u5c55\u7684\u6a21\u5757\u5316\u7684\u57fa\u4e8eC++\u7f16\u5199\u7684\u7528\u4e8eLinux\uff0cBSD\uff0cWindows\u548cMac OS X\u7cfb\u7edf\u4e2d\u7684\u4e92\u8054\u7f51\u4e2d\u7ee7\u804a\u5929\uff08IRC\uff09\u670d\u52a1\u5668\u3002\r\n\r\nInspircd\u5b58\u5728\u5b89\u5168\u6f0f\u6d1e\u3002\u653b\u51fb\u8005\u53ef\u4ee5\u5229\u7528\u6b64\u6f0f\u6d1e\u6b3a\u9a97\u6709\u6548\u7684\u8bc1\u4e66\u3002",
  "discovererName": "Antoine Beaupr\u00c3\u00a9",
  "formalWay": "\u7528\u6237\u53ef\u8054\u7cfb\u4f9b\u5e94\u5546\u83b7\u5f97\u8865\u4e01\u4fe1\u606f\uff1a\r\nhttp://www.inspircd.org/",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2016-07274",
  "openTime": "2016-09-06",
  "patchDescription": "InspIRCd\u662f\u4e00\u6b3e\u53ef\u6269\u5c55\u7684\u6a21\u5757\u5316\u7684\u57fa\u4e8eC++\u7f16\u5199\u7684\u7528\u4e8eLinux\uff0cBSD\uff0cWindows\u548cMac OS X\u7cfb\u7edf\u4e2d\u7684\u4e92\u8054\u7f51\u4e2d\u7ee7\u804a\u5929\uff08IRC\uff09\u670d\u52a1\u5668\u3002\r\n\r\nInspircd\u5b58\u5728\u5b89\u5168\u6f0f\u6d1e\u3002\u653b\u51fb\u8005\u53ef\u4ee5\u5229\u7528\u6b64\u6f0f\u6d1e\u6b3a\u9a97\u6709\u6548\u7684\u8bc1\u4e66\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "Inspircd SSL\u8bc1\u4e66\u6b3a\u9a97\u6f0f\u6d1e\u7684\u8865\u4e01",
  "products": {
    "product": [
      "InspIRCd InspIRCd 2.0.20",
      "InspIRCd InspIRCd  2.0.19",
      "InspIRCd InspIRCd  2.0.18",
      "InspIRCd InspIRCd  2.0.17",
      "InspIRCd InspIRCd  2.0.16",
      "InspIRCd InspIRCd  2.0.15",
      "InspIRCd InspIRCd  2.0.14",
      "InspIRCd InspIRCd  2.0.13",
      "InspIRCd InspIRCd  2.0.12",
      "InspIRCd InspIRCd  2.0.11",
      "InspIRCd InspIRCd  2.0.10",
      "InspIRCd InspIRCd  2.0.7",
      "InspIRCd InspIRCd  2.0.2",
      "InspIRCd InspIRCd  2.0",
      "InspIRCd InspIRCd  1.2.8",
      "InspIRCd InspIRCd  1.2.7",
      "InspIRCd InspIRCd  1.1.18",
      "InspIRCd InspIRCd  1.1.17",
      "InspIRCd InspIRCd  1.1.16",
      "InspIRCd InspIRCd  1.1.15",
      "InspIRCd InspIRCd  1.1.14",
      "InspIRCd InspIRCd  1.1.13",
      "InspIRCd InspIRCd  1.1.12",
      "InspIRCd InspIRCd  1.1.11",
      "InspIRCd InspIRCd  1.1.9",
      "InspIRCd InspIRCd  1.1.8",
      "InspIRCd InspIRCd 1.1.17",
      "InspIRCd InspIRCd  1.1.7",
      "InspIRCd InspIRCd  1.1.6",
      "InspIRCd InspIRCd  1.1.5",
      "InspIRCd InspIRCd  1.1.4",
      "InspIRCd InspIRCd  1.1.3",
      "InspIRCd InspIRCd  1.1.2",
      "InspIRCd InspIRCd  1.1.1",
      "InspIRCd InspIRCd  1.1",
      "InspIRCd InspIRCd  2.0.5",
      "InspIRCd InspIRCd  2.0.1",
      "InspIRCd InspIRCd  1.2.0",
      "InspIRCd InspIRCd  1.1.10"
    ]
  },
  "referenceLink": "http://www.securityfocus.com/bid/92737",
  "serverity": "\u4e2d",
  "submitTime": "2016-09-06",
  "title": "Inspircd SSL\u8bc1\u4e66\u6b3a\u9a97\u6f0f\u6d1e"
}

CVE-2016-7142 (GCVE-0-2016-7142)

Vulnerability from cvelistv5 – Published: 2016-09-26 15:00 – Updated: 2024-08-06 01:50

Summary

The m_sasl module in InspIRCd before 2.0.23, when used with a service that supports SASL_EXTERNAL authentication, allows remote attackers to spoof certificate fingerprints and consequently log in as another user via a crafted SASL message.

Severity ?

No CVSS data available.

CWE

Assigner

mitre

References

URL

Tags

	http://www.inspircd.org/2016/09/03/v2023-released.html	x_refsource_CONFIRM
	https://github.com/inspircd/inspircd/commit/74faf…	x_refsource_CONFIRM
	http://www.openwall.com/lists/oss-security/2016/09/05/8	mailing-listx_refsource_MLIST
	http://www.openwall.com/lists/oss-security/2016/09/04/3	mailing-listx_refsource_MLIST
	http://www.debian.org/security/2016/dsa-3662	vendor-advisoryx_refsource_DEBIAN

Date Public ?

2016-09-03 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T01:50:47.439Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.inspircd.org/2016/09/03/v2023-released.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/inspircd/inspircd/commit/74fafb7f11b06747f69f182ad5e3769b665eea7a"
          },
          {
            "name": "[oss-security] 20160905 Re: CVE ID request: certificate spoofing through crafted SASL message in inspircd, charybdis",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2016/09/05/8"
          },
          {
            "name": "[oss-security] 20160904 CVE ID request: certificate spoofing through crafted SASL message in inspircd, charybdis",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2016/09/04/3"
          },
          {
            "name": "DSA-3662",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2016/dsa-3662"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-09-03T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The m_sasl module in InspIRCd before 2.0.23, when used with a service that supports SASL_EXTERNAL authentication, allows remote attackers to spoof certificate fingerprints and consequently log in as another user via a crafted SASL message."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2016-09-26T14:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.inspircd.org/2016/09/03/v2023-released.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/inspircd/inspircd/commit/74fafb7f11b06747f69f182ad5e3769b665eea7a"
        },
        {
          "name": "[oss-security] 20160905 Re: CVE ID request: certificate spoofing through crafted SASL message in inspircd, charybdis",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2016/09/05/8"
        },
        {
          "name": "[oss-security] 20160904 CVE ID request: certificate spoofing through crafted SASL message in inspircd, charybdis",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2016/09/04/3"
        },
        {
          "name": "DSA-3662",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2016/dsa-3662"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2016-7142",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The m_sasl module in InspIRCd before 2.0.23, when used with a service that supports SASL_EXTERNAL authentication, allows remote attackers to spoof certificate fingerprints and consequently log in as another user via a crafted SASL message."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://www.inspircd.org/2016/09/03/v2023-released.html",
              "refsource": "CONFIRM",
              "url": "http://www.inspircd.org/2016/09/03/v2023-released.html"
            },
            {
              "name": "https://github.com/inspircd/inspircd/commit/74fafb7f11b06747f69f182ad5e3769b665eea7a",
              "refsource": "CONFIRM",
              "url": "https://github.com/inspircd/inspircd/commit/74fafb7f11b06747f69f182ad5e3769b665eea7a"
            },
            {
              "name": "[oss-security] 20160905 Re: CVE ID request: certificate spoofing through crafted SASL message in inspircd, charybdis",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2016/09/05/8"
            },
            {
              "name": "[oss-security] 20160904 CVE ID request: certificate spoofing through crafted SASL message in inspircd, charybdis",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2016/09/04/3"
            },
            {
              "name": "DSA-3662",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2016/dsa-3662"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2016-7142",
    "datePublished": "2016-09-26T15:00:00.000Z",
    "dateReserved": "2016-09-05T00:00:00.000Z",
    "dateUpdated": "2024-08-06T01:50:47.439Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

CNVD-2016-07274

CVE-2016-7142 (GCVE-0-2016-7142)

Tags

Sightings

Nomenclature