[SECURITY] [DSA 2448-1] inspircd security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2448-1 [email protected] http://www.debian.org/security/ Jonathan Wiltshire April 10, 2012 http://www.debian.org/security/faq -...

InspIRCd: Arbitrary code execution

Background InspIRCd Inspire IRCd is a modular C++ IRC daemon Description A vulnerability in InspIRCd allows DNS compression features to control the number of overflowed bytes sent to the heap-based buffer "res" in dns.cpp. Impact A remote attacker could send specially crafted DNS responses,...

DSA-2448-1 inspircd - buffer overflow

Bulletin has no description...

DEBIAN-CVE-2012-1836

Heap-based buffer overflow in dns.cpp in InspIRCd 2.0.5 might allow remote attackers to execute arbitrary code via a crafted DNS query that uses compression...

CVE-2012-1836

Heap-based buffer overflow in dns.cpp in InspIRCd 2.0.5 might allow remote attackers to execute arbitrary code via a crafted DNS query that uses compression...

CVE-2012-1836

Heap-based buffer overflow in dns.cpp in InspIRCd 2.0.5 might allow remote attackers to execute arbitrary code via a crafted DNS query that uses compression...

CVE-2012-1836

Heap-based buffer overflow in dns.cpp in InspIRCd 2.0.5 might allow remote attackers to execute arbitrary code via a crafted DNS query that uses compression...

Heap overflow

Heap-based buffer overflow in dns.cpp in InspIRCd 2.0.5 might allow remote attackers to execute arbitrary code via a crafted DNS query that uses compression...

CVE-2012-1836

Heap-based buffer overflow in dns.cpp in InspIRCd 2.0.5 might allow remote attackers to execute arbitrary code via a crafted DNS query that uses compression...

CVE-2012-1836

CVE-2012-1836 describes a heap-based buffer overflow in InspIRCd 2.0.5 through a crafted DNS query using compression, enabling remote code execution. Connected data corroborate related Debian advisories and follow-up notes indicating subsequent fixes/patches and that later issues arose from an in...

InspIRCd heap corruption vulnerability

Overview InspIRCd 2.0.5 and possibly other versions contain a heap corruption vulnerability that may be exploited with a specifically crafted DNS query. Description InspIRCd contains a heap corruption vulnerability that exists in the dns.cpp code. The res buffer is allocated on the heap and can b...

inspircd -- buffer overflow

InspIRCd reports: InspIRCd contains a heap corruption vulnerability that exists in the dns.cpp code. The res buffer is allocated on the heap and can be overflowed. The res buffer can be exploited during its deallocation. The number of overflowed bytes can be controlled with DNS compression featur...

Gentoo Security Advisory GLSA 200805-08 (inspircd)

The remote host is missing updates announced in advisory GLSA 200805-08. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200805-08 (inspircd)

The remote host is missing updates announced in advisory GLSA 200805-08. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[ GLSA 200805-08 ] InspIRCd: Denial of Service

Gentoo Linux Security Advisory GLSA 200805-08 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...

InspIRCd buffer overflow

namesx and uhnames modules buffer overflows...

GLSA-200805-08 : InspIRCd: Denial of Service

The remote host is affected by the vulnerability described in GLSA-200805-08 InspIRCd: Denial of Service The 'namesx' and 'uhnames' modules do not properly validate network input, leading to a buffer overflow. Impact : A remote attacker can send specially crafted IRC commands to the server, causi...

InspIRCd: Denial of service

Background InspIRCd Inspire IRCd is a modular C++ IRC daemon. Description The "namesx" and "uhnames" modules do not properly validate network input, leading to a buffer overflow. Impact A remote attacker can send specially crafted IRC commands to the server, causing a Denial of Service. Workaroun...

CVE-2008-1925

Buffer overflow in InspIRCd before 1.1.18, when using the namesx and uhnames modules, allows remote attackers to cause a denial of service daemon crash via a large number of channel users with crafted nicknames, idents, and long hostnames...

DEBIAN-CVE-2008-1925

Buffer overflow in InspIRCd before 1.1.18, when using the namesx and uhnames modules, allows remote attackers to cause a denial of service daemon crash via a large number of channel users with crafted nicknames, idents, and long hostnames...