Test ID:	1.3.6.1.4.1.25623.1.0.810282
Category:	General
Title:	InspIRCd < 2.0.23 'm_sasl' Module SASL_EXTERNAL Authentication Spoofing Vulnerability
Summary:	InspIRCd is prone to an authentication spoofing vulnerability.
Description:	Summary: InspIRCd is prone to an authentication spoofing vulnerability. Vulnerability Insight: The flaw is due to an error in the 'm_sasl' module in InspIRC, when used with a service that supports SASL_EXTERNAL authentication Vulnerability Impact: Successful exploitation will allow remote attackers to spoof certificate fingerprints via crafted SASL messages to the IRCd. This allows any user to login as any other user that they know the certificate fingerprint of, and that user has services configured to accept SASL EXTERNAL login requests for. Affected Software/OS: InspIRCd versions before 2.0.23. Solution: Update to version 2.0.23 or later. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:N/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2016-7142 Debian Security Information: DSA-3662 (Google Search) http://www.debian.org/security/2016/dsa-3662 http://www.openwall.com/lists/oss-security/2016/09/04/3 http://www.openwall.com/lists/oss-security/2016/09/05/8
Copyright	Copyright (C) 2017 Greenbone Networks GmbH

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.