linuxdcpp-team team mailing list archive

[Pirre <873985@xxxxxxxxxxxxxxxxxx>]

*** This bug is a security vulnerability ***

Private security bug reported:

Itis possible to  create 2 entry's with same nick in the regtables using
the +regnick command resulting in a entry that 1 exist in both tables
(users.nicks and users.cids) and 1 only in the users.cids. Causing
problems later on , for example not able to delete the one in the cids
table before a script reload and the case where this user changes CID
laters.

To reproduce put a user with cid in the tables , then create a user with same nick (not present) using regnick.
The entry in users.nicks will be overwritten but the users.cids for the old on stays ....

** Affects: adchpp
     Importance: High
     Assignee: Pirre (pierreparys)
         Status: Fix Committed

** Changed in: adchpp
   Importance: Undecided => High

** Changed in: adchpp
       Status: New => Fix Committed

** Changed in: adchpp
     Assignee: (unassigned) => Pirre (pierreparys)

-- 
You received this bug notification because you are a member of
Dcplusplus-team, which is subscribed to the bug report.
https://bugs.launchpad.net/bugs/873985

Title:
  Duplicated entry's in regtables

Status in ADCH++:
  Fix Committed

Bug description:
  Itis possible to  create 2 entry's with same nick in the regtables
  using the +regnick command resulting in a entry that 1 exist in both
  tables (users.nicks and users.cids) and 1 only in the users.cids.
  Causing problems later on , for example not able to delete the one in
  the cids table before a script reload and the case where this user
  changes CID laters.

  To reproduce put a user with cid in the tables , then create a user with same nick (not present) using regnick.
  The entry in users.nicks will be overwritten but the users.cids for the old on stays ....

To manage notifications about this bug go to:
https://bugs.launchpad.net/adchpp/+bug/873985/+subscriptions