65 matches found
Integer overflow
Integer underflow in the cleanstring function in ircstring.c in 1 IRCD-hybrid 7.2.2 and 7.2.3, 2 ircd-ratbox before 2.2.9, and 3 oftc-hybrid before 1.6.8, when flattenlinks is disabled, allows remote attackers to execute arbitrary code or cause a denial of service daemon crash via a LINKS command...
UBUNTU-CVE-2009-4016
Integer underflow in the cleanstring function in ircstring.c in 1 IRCD-hybrid 7.2.2 and 7.2.3, 2 ircd-ratbox before 2.2.9, and 3 oftc-hybrid before 1.6.8, when flattenlinks is disabled, allows remote attackers to execute arbitrary code or cause a denial of service daemon crash via a LINKS command...
Null pointer dereference
cache.c in ircd-ratbox before 2.2.9 allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via a HELP command...
UBUNTU-CVE-2010-0300
cache.c in ircd-ratbox before 2.2.9 allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via a HELP command...
CVE-2010-0300
CVE-2010-0300 affects ircd-ratbox prior to version 2.2.9, where cache.c enables a NULL pointer dereference via the HELP command, causing a denial-of-service in the ircd-ratbox daemon. Fedora/Debian advisories indicate the fix is upstream ircd-ratbox 2.2.9. Some connected docs note that ircd-hybri...
CVE-2009-4016
CVE-2009-4016 concerns an integer underflow in the clean_string function of irc_string.c, exploitable when flatten_links is disabled via the LINKS command. Affected products include IRCD-hybrid (versions 7.2.2 and 7.2.3), ircd-ratbox prior to 2.2.9, and oftc-hybrid prior to 1.6.8. Impact as descr...
Debian Security Advisory DSA 1980-1 (ircd-hybrid/ircd-ratbox)
The remote host is missing an update to ircd-hybrid/ircd-ratbox announced via advisory DSA 1980-1. OpenVAS Vulnerability Test $Id: deb19801.nasl 6614 2017-07-07 12:09:12Z cfischer $ Description: Auto-generated from advisory DSA 1980-1 ircd-hybrid/ircd-ratbox Authors: Thomas Reinke Copyright:...
Debian: Security Advisory (DSA-1980-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
IRCD-Hybrid and ircd-ratbox 'LINKS' Command Remote Integer Underflow Vulnerability
IRCD-Hybrid and ircd-ratbox are prone to a remote integer-underflow vulnerability. A remote attacker may exploit this issue to execute arbitrary code within the context of the affected application. Failed exploit attempts will likely crash the application, denying service to legitimate users...
IRCD-Hybrid and ircd-ratbox 'LINKS' Command Remote Integer Underflow Vulnerability
IRCD-Hybrid and ircd-ratbox are prone to a remote integer-underflow vulnerability. A remote attacker may exploit this issue to execute arbitrary code within the context of the affected application. Failed exploit attempts will likely crash the application, denying service to legitimate users...
[SECURITY] [DSA 1980-1] New ircd-hybrid/ircd-ratbox packages fix arbitrary code execution
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1980-1 [email protected] http://www.debian.org/security/ Steffen Joeris January 27, 2010 http://www.debian.org/security/faq -...
ircd-ratbox 'HELP' Command Denial Of Service Vulnerability
The SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description scriptoid"1.3.6.1.4.1.25623.1.0.100471";...
ircd-ratbox 'HELP' Command Denial Of Service Vulnerability
The 'ircd-ratbox' daemon is prone to a denial-of-service vulnerability. Attackers can exploit this issue to deny service to legitimate users. This issue affects ircd-ratbox 2.2.8; other versions may also be affected. OpenVAS Vulnerability Test $Id: ircdratbox37979.nasl 5394 2017-02-22 09:22:42Z...
IRCD-Hybrid and ircd-ratbox 'LINKS' Command Remote Integer Underflow Vulnerability
IRCD-Hybrid and ircd-ratbox are prone to a remote integer-underflow vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if descripti...
IRCD-Hybrid and ircd-ratbox 'LINKS' Command Remote Integer Underflow Vulnerability
IRCD-Hybrid and ircd-ratbox are prone to a remote integer-underflow vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if descripti...
CVE-2007-2786
CVE-2007-2786 affects Ratbox IRC Daemon (ircd-ratbox) 2.2.5 and earlier. The issue allows remote attackers to cause a denial of service via resource exhaustion by making many requests from a single client. The available documents confirm the vulnerability and affected version range; they do not p...
CVE-2004-0605
Non-registered IRC users using 1 ircd-hybrid 7.0.1 and earlier, 2 ircd-ratbox 1.5.1 and earlier, or 3 ircd-ratbox 2.0rc6 and earlier do not have a rate-limit imposed, which could allow remote attackers to cause a denial of service by repeatedly making requests, which are slowly dequeued...
Multiple IRC Client Non-registered User parse_client_queued Saturation DoS
The remote host is running a version of ircd which is vulnerable to a rate-limiting Denial of Service DoS attack. The flaw is in the fact that the IRCD daemon reserves more than 500 bytes of memory for each line received. An attacker, exploiting this flaw, would need network access to the IRC...
CVE-2004-0605
The CVE-2004-0605 entry applies to IRC daemons that fail to rate-limit non-registered users, causing a Denial of Service. Affected: ircd-hybrid <= 7.0.1, ircd-ratbox
CVE-2004-0605
Non-registered IRC users using 1 ircd-hybrid 7.0.1 and earlier, 2 ircd-ratbox 1.5.1 and earlier, or 3 ircd-ratbox 2.0rc6 and earlier do not have a rate-limit imposed, which could allow remote attackers to cause a denial of service by repeatedly making requests, which are slowly dequeued...