110 matches found
FreeBSD Ports: eggdrop
The remote host is missing an update to the system as announced in the referenced advisory. VID 399f4cd7-4d59-11de-8811-0030843d3802 OpenVAS Vulnerability Test $ Description: Auto generated from VID 399f4cd7-4d59-11de-8811-0030843d3802 Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...
Fedora Core 10 FEDORA-2009-5572 (eggdrop)
The remote host is missing an update to eggdrop announced via advisory FEDORA-2009-5572. OpenVAS Vulnerability Test $Id: fcore20095572.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-5572 eggdrop Authors: Thomas Reinke Copyright: Copyright c 2009...
Mandrake Security Advisory MDVSA-2009:126 (eggdrop)
The remote host is missing an update to eggdrop announced via advisory MDVSA-2009:126. OpenVAS Vulnerability Test $Id: mdksa2009126.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:126 eggdrop Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft...
Fedora Core 9 FEDORA-2009-5568 (eggdrop)
The remote host is missing an update to eggdrop announced via advisory FEDORA-2009-5568. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by th...
Fedora Core 10 FEDORA-2009-5572 (eggdrop)
The remote host is missing an update to eggdrop announced via advisory FEDORA-2009-5572. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by th...
Mandrake Security Advisory MDVSA-2009:126 (eggdrop)
The remote host is missing an update to eggdrop announced via advisory MDVSA-2009:126. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...
Mandriva Linux Security Advisory : eggdrop (MDVSA-2009:126-1)
mod/server.mod/servmsg.c in Eggheads Eggdrop and Windrop 1.6.19 and earlier allows remote attackers to cause a denial of service crash via a crafted PRIVMSG that causes an empty string to trigger a negative string length copy. NOTE: this issue exists because of an incorrect fix for CVE-2007-2807...
FreeBSD : eggdrop -- denial of service vulnerability (399f4cd7-4d59-11de-8811-0030843d3802)
Secunia reports : The vulnerability is caused due to an error in the processing of private messages within the server module /mod/server.mod/servrmsg.c. This can be exploited to cause a crash by sending a specially crafted message to the bot. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. T...
[SECURITY] Fedora 10 Update: eggdrop-1.6.19-4.fc10
Eggdrop is the world's most popular Open Source IRC bot, designed for flexibility and ease of use. It is extendable with Tcl scripts and/or C modules, has support for the big five IRC networks and is able to form botnets, share partylines and userfiles between bots...
Fedora 9 : eggdrop-1.6.19-4.fc9 (2009-5568)
mod/server.mod/servmsg.c in Eggheads Eggdrop and Windrop 1.6.19 and earlier allows remote attackers to cause a denial of service crash via a crafted PRIVMSG that causes an empty string to trigger a negative string length copy. NOTE: this issue exists because of an incorrect fix for CVE-2007-2807...
Fedora 10 : eggdrop-1.6.19-4.fc10 (2009-5572)
mod/server.mod/servmsg.c in Eggheads Eggdrop and Windrop 1.6.19 and earlier allows remote attackers to cause a denial of service crash via a crafted PRIVMSG that causes an empty string to trigger a negative string length copy. NOTE: this issue exists because of an incorrect fix for CVE-2007-2807...
CVE-2009-1789
mod/server.mod/servmsg.c in Eggheads Eggdrop and Windrop 1.6.19 and earlier allows remote attackers to cause a denial of service crash via a crafted PRIVMSG that causes an empty string to trigger a negative string length copy. NOTE: this issue exists because of an incorrect fix for CVE-2007-2807...
DEBIAN-CVE-2009-1789
mod/server.mod/servmsg.c in Eggheads Eggdrop and Windrop 1.6.19 and earlier allows remote attackers to cause a denial of service crash via a crafted PRIVMSG that causes an empty string to trigger a negative string length copy. NOTE: this issue exists because of an incorrect fix for CVE-2007-2807...
Design/Logic Flaw
mod/server.mod/servmsg.c in Eggheads Eggdrop and Windrop 1.6.19 and earlier allows remote attackers to cause a denial of service crash via a crafted PRIVMSG that causes an empty string to trigger a negative string length copy. NOTE: this issue exists because of an incorrect fix for CVE-2007-2807...
CVE-2009-1789
mod/server.mod/servmsg.c in Eggheads Eggdrop and Windrop 1.6.19 and earlier allows remote attackers to cause a denial of service crash via a crafted PRIVMSG that causes an empty string to trigger a negative string length copy. NOTE: this issue exists because of an incorrect fix for CVE-2007-2807...
CVE-2009-1789
Eggdrop/Windrop 1.6.19 and earlier are affected by CVE-2009-1789 due to a vulnerable handling in mod/server.mod/servmsg.c, where a crafted PRIVMSG can trigger a crash (denial of service) by causing an empty string to trigger a negative string length copy. The issue stems from an incomplete patch ...
Security fix for the ALT Linux 6 package eggdrop version 1.6.19-alt2
May 18, 2009 Vladimir V Kamarzin 1.6.19-alt2 - Security fix: eggdrop remote crash vulnerability incomplete patch for CVE-2007-2807 Closes: 20067...
eggdrop / windrop IRC client DoS
Crash on empty privmsg message...
Eggdrop/Windrop 1.6.19 ctcpbuf Remote Crash Vulnerability
No description provided by source. eggdrop/windrop remote crash vulnerability This message: Message body More options Related messages: Next message Previous message Next in thread Replies From: Thomas Sader thommeyatgmail.com Date: Fri, 15 May 2009 05:54:08 +0200 Affected software...
Eggdrop 'ctcpbuf' Remote Denial Of Service Vulnerability
Eggdrop is prone to a remote denial-of-service vulnerability because it fails to adequately validate user-supplied input. An attacker may exploit this issue to crash the application, resulting in a denial-of-service condition. This issue is related to the vulnerability described in BID 24070...