Command injection

channel.c in ngIRCd 20 and 20.1 allows remote attackers to cause a denial of service assertion failure and crash via a KICK command for a user who is not on the associated channel...

CVE-2013-1747

CVE-2013-1747 affects ngIRCd 20 and 20.1; a vulnerability in channel.c allows a remote attacker to trigger an assertion failure and crash by sending a KICK for a user not on the channel (denial of service). Exploitation status is not detailed in the provided documents. Remediation: upgrade to ngI...

CVE-2013-1747

channel.c in ngIRCd 20 and 20.1 allows remote attackers to cause a denial of service assertion failure and crash via a KICK command for a user who is not on the associated channel...

CVE-2013-1747

channel.c in ngIRCd 20 and 20.1 allows remote attackers to cause a denial of service assertion failure and crash via a KICK command for a user who is not on the associated channel...

DEBIAN-CVE-2009-4652

The 1 ConnGetCipherInfo and 2 ConnUsesSSL functions in src/ngircd/conn.c in ngIRCd 13 and 14, when SSL/TLS support is present and standalone mode is disabled, allow remote attackers to cause a denial of service application crash by sending the MOTD command from another server in the same IRC...

CVE-2009-4652

The 1 ConnGetCipherInfo and 2 ConnUsesSSL functions in src/ngircd/conn.c in ngIRCd 13 and 14, when SSL/TLS support is present and standalone mode is disabled, allow remote attackers to cause a denial of service application crash by sending the MOTD command from another server in the same IRC...

CVE-2009-4652

The 1 ConnGetCipherInfo and 2 ConnUsesSSL functions in src/ngircd/conn.c in ngIRCd 13 and 14, when SSL/TLS support is present and standalone mode is disabled, allow remote attackers to cause a denial of service application crash by sending the MOTD command from another server in the same IRC...

UBUNTU-CVE-2009-4652

The 1 ConnGetCipherInfo and 2 ConnUsesSSL functions in src/ngircd/conn.c in ngIRCd 13 and 14, when SSL/TLS support is present and standalone mode is disabled, allow remote attackers to cause a denial of service application crash by sending the MOTD command from another server in the same IRC...

CVE-2009-4652

The 1 ConnGetCipherInfo and 2 ConnUsesSSL functions in src/ngircd/conn.c in ngIRCd 13 and 14, when SSL/TLS support is present and standalone mode is disabled, allow remote attackers to cause a denial of service application crash by sending the MOTD command from another server in the same IRC...

CVE-2009-4652

The 1 ConnGetCipherInfo and 2 ConnUsesSSL functions in src/ngircd/conn.c in ngIRCd 13 and 14, when SSL/TLS support is present and standalone mode is disabled, allow remote attackers to cause a denial of service application crash by sending the MOTD command from another server in the same IRC...

CVE-2009-4652

The 1 ConnGetCipherInfo and 2 ConnUsesSSL functions in src/ngircd/conn.c in ngIRCd 13 and 14, when SSL/TLS support is present and standalone mode is disabled, allow remote attackers to cause a denial of service application crash by sending the MOTD command from another server in the same IRC...

CVE-2009-4652

The CVE concerns ngIRCd (versions 13–14). When SSL/TLS is enabled and standalone mode is disabled, the functions Conn_GetCipherInfo and Conn_UsesSSL in src/ngircd/conn.c can allow remote attackers to trigger a denial of service (application crash) by sending the MOTD command from another server o...

ngIRCd SSL/TLS Support MOTD Request Multiple Denial Of Service Vulnerabilities

ngIRCd is prone to multiple denial-of-service vulnerabilities when the server is running with SSL/TLS support. Attackers can leverage these issues to crash the server and deny access to legitimate users. ngIRCd 13 through ngIRCd 14 are vulnerable; these issues have been fixed in ngIRCd 14.1...

ngIRCd SSL/TLS支持MOTD请求远程拒绝服务漏洞

BUGTRAQ ID: 37021 ngIRCd是一款多平台上可使用的IRC守护程序。 对于编译了SSL/TLS支持的ngIRCd服务器，远程攻击者可以通过向src/ngircd/conn.c文件中的ConnGetCipherInfo和ConnUsesSSL函数发送恶意的MOTD请求导致拒绝服务。仅有没有编译ssl/tls支持的服务器才不受影响，在配置中禁用SSL无法缓解这个漏洞。 ngIRCD 14 ngIRCD 13 厂商补丁： ngIRCD ------ 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

ngIRCd SSL/TLS Support MOTD Request Multiple Denial Of Service Vulnerabilities

ngIRCd is prone to multiple denial of service DoS vulnerabilities when the server is running with SSL/TLS support. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

[Backports-security-announce] Security Update for ngircd

Gerfried Fuchs uploaded new packages for ngircd which fixed the following security problem: CVE-2008-0285, Debian Bug 461067 ngIRCd 0.10.x before 0.10.4 and 0.11.0 before 0.11.0-pre2 allows remote attackers to cause a denial of service crash via crafted IRC PART message, which triggers an invalid...

[Backports-security-announce] Security Update for ngircd

Gerfried Fuchs uploaded new packages for ngircd which fixed the following security problem: CVE-2008-0285, Debian Bug 461067 ngIRCd 0.10.x before 0.10.4 and 0.11.0 before 0.11.0-pre2 allows remote attackers to cause a denial of service crash via crafted IRC PART message, which triggers an invalid...

Gentoo Security Advisory GLSA 200501-40 (ngIRCd)

The remote host is missing updates announced in advisory GLSA 200501-40. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200801-13 (ngircd)

The remote host is missing updates announced in advisory GLSA 200801-13. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200801-13 (ngircd)

The remote host is missing updates announced in advisory GLSA 200801-13. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...