GCVE - cpe:2.3:a:znc:znc:0.058:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:znc:znc:0.058:*:*:*:*:*:*:*

part: a version: 0.058 update: *

Vendor	Znc (`ac6b81c9-a00a-54ca-abd6-5b6ca7666a04`)
Product	Znc (`c3d67f23-4479-5b4b-ad2b-0b6f32b430f5`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:deb/debian/znc`	purl2cpe	2026-06-01 10:15:43.785071
`pkg:deb/ubuntu/znc`	purl2cpe	2026-06-01 10:15:43.785073
`pkg:github/znc/znc`	purl2cpe	2026-06-01 10:15:43.785074
`pkg:rpm/fedora/znc`	purl2cpe	2026-06-01 10:15:43.785075
`pkg:rpm/opensuse/znc`	purl2cpe	2026-06-01 10:15:43.785077
`pkg:sourceforge/znc`	purl2cpe	2026-06-01 10:15:43.785078

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2010-2448`	vulnerable	2026-06-08 04:55:07.674926	Details available znc.cpp in ZNC before 0.092 allows remote authenticated users to cause a denial of service (crash) by requesting traffic statistics when there is an active unauthenticated connection, which triggers a NULL pointer dereference, as demonstrated using (1) a traffic link in the web administration pages or (2) the traffic command in the /znc shell. Published: 2010-07-12T17:00:00.000Z Updated: 2024-09-16T22:51:49.519Z Open on db.gcve.eu Reference links http://znc.svn.sourceforge.net/viewvc/znc/trunk/znc.cpp?r1=2025&r2=2026&pathrev=2026 http://www.vupen.com/english/advisories/2010/1775 http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043043.html http://secunia.com/advisories/40523 http://sourceforge.net/projects/znc/files/znc/0.092/znc-0.092-changelog.txt/view	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-2658`	vulnerable	2026-06-08 04:51:29.707500	Details available Directory traversal vulnerability in ZNC before 0.072 allows remote attackers to overwrite arbitrary files via a crafted DCC SEND request. Published: 2009-08-04T16:13:00.000Z Updated: 2024-08-07T05:59:56.912Z Open on db.gcve.eu Reference links http://en.znc.in/w/index.php?title=ZNC&oldid=3209#WARNING http://www.openwall.com/lists/oss-security/2009/07/21/5 https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00965.html http://znc.svn.sourceforge.net/viewvc/znc?view=rev&sortby=rev&sortdir=down&revision=1570 http://en.znc.in/wiki/ChangeLog/0.072	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-0759`	vulnerable	2026-06-08 04:51:11.121520	Details available Multiple CRLF injection vulnerabilities in webadmin in ZNC before 0.066 allow remote authenticated users to modify the znc.conf configuration file and gain privileges via CRLF sequences in the quit message and other vectors. Published: 2009-03-03T16:00:00.000Z Updated: 2024-08-07T04:48:51.664Z Open on db.gcve.eu Reference links http://secunia.com/advisories/34230 http://www.debian.org/security/2009/dsa-1735 http://www.openwall.com/lists/oss-security/2009/03/01/2 http://znc.svn.sourceforge.net/viewvc/znc?view=rev&sortby=rev&sortdir=down&revision=1395 http://osvdb.org/52295	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.