CVE-2010-2448

znc.cpp in ZNC before 0.092 allows remote authenticated users to cause a denial of service crash by requesting traffic statistics when there is an active unauthenticated connection, which triggers a NULL pointer dereference, as demonstrated using 1 a traffic link in the web administration pages o...