CVE-2009-0759: Znc

Medium severity, CVSS 6.5. EPSS: 2.1% chance of exploitation in the next 30 days.

Multiple CRLF injection vulnerabilities in webadmin in ZNC before 0.066 allow remote authenticated users to modify the znc.conf configuration file and gain privileges via CRLF sequences in the quit message and other vectors.

Affected products

• Znc Znc: up to and including 0.062; version 0.056 only; version 0.058 only

Published 2009-03-03. Last modified 2026-06-16.