Lucene search

K
ubuntucveUbuntu.comUB:CVE-2009-1789
HistoryMay 26, 2009 - 12:00 a.m.

CVE-2009-1789

2009-05-2600:00:00
ubuntu.com
ubuntu.com
4

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

0.049 Low

EPSS

Percentile

92.8%

mod/server.mod/servmsg.c in Eggheads Eggdrop and Windrop 1.6.19 and earlier
allows remote attackers to cause a denial of service (crash) via a crafted
PRIVMSG that causes an empty string to trigger a negative string length
copy. NOTE: this issue exists because of an incorrect fix for
CVE-2007-2807.

OSVersionArchitecturePackageVersionFilename
ubuntu8.04noarcheggdrop<Β 1.6.18-1.1ubuntu1.1UNKNOWN
ubuntu8.10noarcheggdrop<Β 1.6.19-1.1ubuntu1.8.10.1UNKNOWN
ubuntu9.04noarcheggdrop<Β 1.6.19-1.1ubuntu1.9.04.1UNKNOWN
ubuntu9.10noarcheggdrop<Β 1.6.19-1.2ubuntu1UNKNOWN
ubuntu10.04noarcheggdrop<Β 1.6.19-1.2ubuntu1UNKNOWN

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

0.049 Low

EPSS

Percentile

92.8%