CVE-2007-3246
The do_set_password function in modules/chanserv/set.c in IRC Services before 5.0.60 preserves...
The do_set_password function in modules/chanserv/set.c in IRC Services before 5.0.60 preserves channel founder privileges across a channel password change (ChanServ SET PASSWORD), which allows remote authenticated users to obtain the new password through automated e-mail, or perform privileged actions without knowing the new password.
Exploit likelihood
What each source reports
NVD Score used
The do_set_password function in modules/chanserv/set.c in IRC Services before 5.0.60 preserves channel founder privileges across a channel password change (ChanServ SET PASSWORD), which allows remote authenticated users to obtain the new password through automated e-mail, or perform privileged actions without knowing the new password.
- Record
CVE-2007-3246- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:P/I:N/A:N - Updated
- 2026-11-02
CVE List No score
The do_set_password function in modules/chanserv/set.c in IRC Services before 5.0.60 preserves channel founder privileges across a channel password change (ChanServ SET PASSWORD), which allows remote authenticated users to obtain the new password through automated e-mail, or perform privileged actions without knowing the new password.
- Record
CVE-2007-3246- Updated
- 2026-11-02
EUVDEUVD-2007-3236 No score
The do_set_password function in modules/chanserv/set.c in IRC Services before 5.0.60 preserves channel founder privileges across a channel password change (ChanServ SET PASSWORD), which allows remote authenticated users to obtain the new password through automated e-mail, or perform privileged actions without knowing the new password.
- Record
EUVD-2007-3236- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-c66c-c4c3-hgxf No score
The do_set_password function in modules/chanserv/set.c in IRC Services before 5.0.60 preserves...
The do_set_password function in modules/chanserv/set.c in IRC Services before 5.0.60 preserves channel founder privileges across a channel password change (ChanServ SET PASSWORD), which allows remote authenticated users to obtain the new password through automated e-mail, or perform privileged actions without knowing the new password.
- Record
GHSA-c66c-c4c3-hgxf- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| aliases, references, title | GitHub Advisories | |
| first indexed | CVE List, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2007-3246 is a medium vulnerability (CVSS 5.0) in Irc Services Services, published June 15, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.90%, the 79th percentile. No source names a fixed version.
References
lists.ircservices.za.net/pipermail/ircservices/2007/005229.html
ircservices.za.net/Changes.txt
exchange.xforce.ibmcloud.com/vulnerabilities/34945
osvdb.org/41691
nvd.nist.gov/vuln/detail/CVE-2007-3246
github.com/advisories/GHSA-c66c-c4c3-hgxf