CVE-2009-1789

Eggdrop/Windrop 1.6.19 and earlier are affected by CVE-2009-1789 due to a vulnerable handling in mod/server.mod/servmsg.c, where a crafted PRIVMSG can trigger a crash (denial of service) by causing an empty string to trigger a negative string length copy. The issue stems from an incomplete patch ...