CVE-2005-0199 Integer underflow in the Lists_MakeMask() function in lists.c in ngIRCd before 0.8.2 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a....
CriticalCVSS 9.8
EPSS 18.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Integer underflow in the Lists_MakeMask() function in lists.c in ngIRCd before 0.8.2 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a long MODE line that causes an incorrect length calculation, which leads to a buffer overflow.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| barton ngircd | < 0.8.2 | 0.8.2 |
References
- [ngIRCd-ML] 20050126 ngIRCd 0.8.2 broken-link mailing-list patch
- bugs.gentoo.org issue-tracking
- 14056 broken-link third-party-advisory
- 14059 broken-link third-party-advisory
- 1013047 broken-link third-party-advisory vdb-entry
- GLSA-200501-40 patch third-party-advisory vendor-advisory
- 12397 broken-link exploit patch third-party-advisory vdb-entry
- ngircd-listmakemask-bo(19143) third-party-advisory vdb-entry