CWE Code: 94
Vulnerability Type: privilege_escalation
CVSS Score: 6.5
CWE Name:  Improper Control of Generation of Code ('Code Injection')
Summary: multiple crlf injection vulnerabilities in webadmin in znc before 0.066 allow remote authenticated users to modify the znc.conf configuration file and gain privileges via crlf sequences in the quit message and other vectors.
Access Authentication: SINGLE
Access Complexity: LOW
Access Vector: NETWORK
Impact (C/I/A): PARTIAL/PARTIAL/PARTIAL
Published Date: 2009-03-03
Last Modified Date: 2009-06-09