CVE-2003-0478 Format string vulnerability in (1) Bahamut IRCd 1.4.35 and earlier, and other IRC daemons based on Bahamut including (2) digatech 1.2.1, (3) methane 0.1.1, (4) AndromedeIRCd 1.2.3-Release, and (5) irc...
HighCVSS 10.0
EPSS 12.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Format string vulnerability in (1) Bahamut IRCd 1.4.35 and earlier, and other IRC daemons based on Bahamut including (2) digatech 1.2.1, (3) methane 0.1.1, (4) AndromedeIRCd 1.2.3-Release, and (5) ircd-RU, when running in debug mode, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a request containing format strings.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| andromede adromedeircd | = 1.2.3 | No fix listed |
| daniel moss methane | = 0.1.1 | No fix listed |
| hans westerhof digatech | = 1.2.1 | No fix listed |
| wenet ircd-ru | All versions | No fix listed |
| bahamut ircd | <= 1.4.35 | No fix listed |
References
- 20030626 Bahamut IRCd <= 1.4.35 and several derived daemons mailing-list
- 20030627 Re: Bahamut IRCd <= 1.4.35 and several derived daemons mailing-list
- 20030627 Bahamut DoS mailing-list