CVE:CVE-2009-0759
CNNVD:CNNVD-200903-059
ZNC是一套允许用户从工作站登录到IRC服务器的IRC代理。
ZNC的Webadmin模块中存在多个回车换行符注入(CRLF)漏洞。通过认证的远程攻击者可以修改znc.conf配置文件并在quit消息中注入CRLF序列导致以提升的权限执行任意代码。
solution:Upgrade znc znc to a higher version than 0.062,0.056,0.058,and avoid the version (,0.062],0.056,0.058