Debian DSA-1982-1 : hybserv - denial of service

Julien Cristau discovered that hybserv, a daemon running IRC services for IRCD-Hybrid, is prone to a denial of service attack via the commands option. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security...

Hybserv2 :help命令远程拒绝服务漏洞

BUGTRAQ ID: 38006 CVE ID: CVE-2010-0303 Hybserv2是改进版的Hybserv IRC服务器，可提供即时会话服务。 Hybserv2的mystring.c文件中存在拒绝服务漏洞，远程用户可以通过向MemoServ服务发送包含有help \t选项的私人消息导致守护程序崩溃。 Hybserv2 Hybserv2 1.9.4 Hybserv2 Hybserv2 1.9.3 Hybserv2 Hybserv2 1.9.2 厂商补丁： Debian ------ Debian已经为此发布了一个安全公告（DSA-1982-1）以及相应补丁:...

CVE-2010-0303

The CVE-2010-0303 vulnerability affects hybserv in IRCD-Hybrid (Hybrid2 IRC Services) versions 1.9.2 to 1.9.4, where a remote user can crash the daemon by sending a MemoServ private message containing the sequence ":help \t". Technical sources consolidate this as a denial-of-service issue arising...

[SECURITY] [DSA 1982-1] New hybserv packages fix denial of service

------------------------------------------------------------------------ Debian Security Advisory DSA-1982-1 [email protected] http://www.debian.org/security/ Steffen Joeris January 29, 2010 http://www.debian.org/security/faq -...