CVE-2008-3969

no score yetEPSS 2.4%

No CVSS score yet. EPSS 2.4% chance of exploitation in the next 30 days.

Multiple unspecified vulnerabilities in BitlBee before 1.2.3 allow remote attackers to "overwrite" and "hijack" existing accounts via unknown vectors related to "inconsistent handling of the USTATUS_IDENTIFIED state." NOTE: this issue exists because of an incomplete fix for CVE-2008-3920.

EPSS: 2.4% chance of exploitation in the next 30 days; higher than 84% of CVEs (scores of 2026-10-31)
Published: 2008-09-11
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

bitlbee:bitlbee
fedoraproject:fedora

References

http://secunia.com/advisories/31690
http://secunia.com/advisories/31991
http://security.gentoo.org/glsa/glsa-200809-14.xml
http://www.bitlbee.org/main.php/changelog.html
http://www.bitlbee.org/main.php/news.r.html

Check your stack JSON