Debian Security Advisory

DSA-3662-1 inspircd -- security update

Date Reported:
08 Sep 2016
Affected Packages:
inspircd
Vulnerable:
Yes
Security database references:
In Mitre's CVE dictionary: CVE-2016-7142.
More information:

It was discovered that incorrect SASL authentication in the Inspircd IRC server may lead to users impersonating other users.

For the stable distribution (jessie), this problem has been fixed in version 2.0.17-1+deb8u2.

For the unstable distribution (sid), this problem has been fixed in version 2.0.23-1.

We recommend that you upgrade your inspircd packages.