Nefarious2 Project

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Nefarious2 Project records in CISA KEV

No Nefarious2 Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Nefarious2 1 record MEDIUM

Records

1 record in Nefarious2 · all components

TI-2016-06144 CVE-2016-7145 · GHSA-5rm5-mx9g-m6g4

The m_authenticate function in ircd/m_authenticate.c in nefarious2 allows remote…

MEDIUM 44

The m_authenticate function in ircd/m_authenticate.c in nefarious2 allows remote attackers to spoof certificate fingerprints and consequently log in as another user via a crafted AUTHENTICATE parameter.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.00887 Published 2017-03-07 No fix listed CWE-287

Open these records in search →

Critical	1
High	0
Medium	0
Low	0
No CVSS	0