Lucene search

K
mageiaGentoo FoundationMGASA-2013-0265
HistoryAug 30, 2013 - 9:33 p.m.

Updated ngircd package fixes CVE-2013-5580

2013-08-3021:33:18
Gentoo Foundation
advisories.mageia.org
12

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

EPSS

0.027

Percentile

90.7%

Updated ngircd package fixes security vulnerability: Denial of service bug (server crash) in ngIRCd before 20.3 which could happen when the configuration option “NoticeAuth” is enabled (which is NOT the default) and ngIRCd failed to send the “notice auth” messages to new clients connecting to the server (CVE-2013-5580).

OSVersionArchitecturePackageVersionFilename
Mageia3noarchngircd< 20.3-1ngircd-20.3-1.mga3

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

EPSS

0.027

Percentile

90.7%