• info
• discussion
• exploit
• solution
• references

BitlBee Unspecified Security Bypass Variant Vulnerability

BitlBee is prone to an unspecified security-bypass vulnerability.

Successfully exploiting this issue may allow attackers to recreate or hijack user accounts on the system. Gaining access to these accounts may aid in further attacks.

Versions prior to BitlBee 1.2.3 are vulnerable.

NOTE: This issue is similar to the vulnerability discussed in BID 30858 (BitlBee Unspecified Security Bypass Vulnerability) and may be caused by an incomplete fix for that issue.