irc-channel.c in ngIRCd before 0.10.3 allows remote attackers to cause a denial of service (crash) via a JOIN command without a channel argument.
arthur.barton.de/pipermail/ngircd-ml/2007-July/000292.html
bugs.debian.org/cgi-bin/bugreport.cgi?bug=451875
bugs.debian.org/cgi-bin/bugreport.cgi?msg=10%3Bfilename=90-remote-vulnerability.dpatch%3Batt=1%3Bbug=451875
ngircd.barton.de/doc/ChangeLog
osvdb.org/39295
secunia.com/advisories/27692
www.securityfocus.com/bid/26489