CVE-2008-1501 The send_user_mode function in s_user.c in (1) Undernet ircu 2.10.12.12 and earlier, (2) snircd 1.3.4 and earlier, and unspecified other ircu derivatives allows remote attackers to cause a denial of s...
MediumCVSS 5.0
EPSS 5.2%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
The send_user_mode function in s_user.c in (1) Undernet ircu 2.10.12.12 and earlier, (2) snircd 1.3.4 and earlier, and unspecified other ircu derivatives allows remote attackers to cause a denial of service (daemon crash) via a malformed MODE command.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ircu | <= 2.10.12.12 | No fix listed |
| quakenet snircd | <= 1.3.4 | No fix listed |
References
- Debian Security Tracker CVE-2008-1501 vendor-advisory
- hg.quakenet.org
- 20080324 ircu/snircd remote crash vulnerability exploit mailing-list
- 43613 vdb-entry
- 29481 third-party-advisory vendor-advisory
- 29486 third-party-advisory vendor-advisory
- 3779 third-party-advisory
- 20080324 ircu/snircd remote crash vulnerability mailing-list
- 28413 vdb-entry
- 1019687 vdb-entry
- 1019688 vdb-entry
- ADV-2008-0977 vdb-entry
- ADV-2008-0978 vdb-entry
- snircd-sendusermode-dos(41397) vdb-entry
- undernet-ircu-sendusermode-dos(41401) vdb-entry
- 5306 exploit