CVE-2005-4624 The m_join function in channel.c for PTnet ircd 1.5 and 1.6 allows remote attackers to cause a denial of service (memory exhaustion that triggers a daemon restart) via a large number of requests to jo...
MediumCVSS 5.0
EPSS 1.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The m_join function in channel.c for PTnet ircd 1.5 and 1.6 allows remote attackers to cause a denial of service (memory exhaustion that triggers a daemon restart) via a large number of requests to join a "charmed channel" such as PTnet, #PTnoticias and #*.log, which causes ircd to open the channel even though it does not have any valid users.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ptnet ircd | = 1.5 | No fix listed |
| ptnet ircd | = 1.6 | No fix listed |
References
- 20051230 PTnet IRCD heap exhaustion and integer overflow mailing-list vendor-advisory
- 1015425 exploit vdb-entry vendor-advisory
- 16089 vdb-entry