CVE-2000-0594 BitchX IRC client does not properly cleanse an untrusted format string, which allows remote attackers to cause a denial of service via an invite to a channel whose name includes special formatting cha...
MediumCVSS 5.0
EPSS 9.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
BitchX IRC client does not properly cleanse an untrusted format string, which allows remote attackers to cause a denial of service via an invite to a channel whose name includes special formatting characters.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| caldera openlinux desktop | = 2.3 | No fix listed |
| caldera openlinux ebuilder | = 2.3 | No fix listed |
| caldera openlinux edesktop | = 2.4 | No fix listed |
| caldera openlinux eserver | = 2.3 | No fix listed |
| freebsd | = 3.5 | No fix listed |
| freebsd | = 4.0 | No fix listed |
| mandrakesoft mandrake linux | = 2007 | No fix listed |
References
- 20000704 BitchX exploit possibly waiting to happen, certain DoS mailing-list
- 20000707 CONECTIVA LINUX SECURITY ANNOUNCEMENT - BitchX mailing-list
- 20000707 BitchX update mailing-list
- FreeBSD-SA-00:32 vendor-advisory
- 20000704 BitchX /ignore bug mailing-list
- CSSA-2000-022.0 vendor-advisory
- RHSA-2000:042 vendor-advisory
- 1436 vdb-entry
- irc-bitchx-invite-dos(4897) vdb-entry