VDB

DEBIAN-CVE-2008-3969

DEBIAN-CVE-2008-3969 PUBLISHED

Multiple unspecified vulnerabilities in BitlBee before 1.2.3 allow remote attackers to "overwrite" and "hijack" existing accounts via unknown vectors related to "inconsistent handling of the USTATUS_IDENTIFIED state." NOTE: this issue exists because of an incomplete fix for CVE-2008-3920.

Affected Products

VendorProductVersions
Debian:11bitlbee0, 0, 0
Debian:12bitlbee0, 0, 0
Debian:13bitlbee0, 0, 0

Timeline

  • Sep 11, 2008 CVE Published
  • Apr 28, 2026 CVE Updated
Open in Interactive Console →
$ Console Community · 100/wk Open console ›