CVE-2008-0285 ngIRCd 0.10.x before 0.10.4 and 0.11.0 before 0.11.0-pre2 allows remote attackers to cause a denial of service (crash) via crafted IRC PART message, which triggers an invalid dereference.
MediumCVSS 5.0
EPSS 1.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
ngIRCd 0.10.x before 0.10.4 and 0.11.0 before 0.11.0-pre2 allows remote attackers to cause a denial of service (crash) via crafted IRC PART message, which triggers an invalid dereference.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ngircd | <= 0.10.3 | No fix listed |
| ngircd | <= 0.11.0-pre1 | No fix listed |
| debian/ngircd(Debian:12) | < 0.10.3-2 | 0.10.3-2 |
| debian/ngircd(Debian:13) | < 0.10.3-2 | 0.10.3-2 |
| debian/ngircd(Debian:14) | < 0.10.3-2 | 0.10.3-2 |
References
- arthur.barton.de exploit
- bugs.gentoo.org
- ngircd.barton.de
- 28425 third-party-advisory
- 28673 third-party-advisory
- GLSA-200801-13 vendor-advisory
- 27318 vdb-entry
- Debian Security Tracker CVE-2008-0285 vendor-advisory
- bugs.debian.org issue-tracking