CVE-2008-1925 Buffer overflow in InspIRCd before 1.1.18, when using the namesx and uhnames modules, allows remote attackers to cause a denial of service (daemon crash) via a large number of channel users with craft...
MediumCVSS 5.0
EPSS 2.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Buffer overflow in InspIRCd before 1.1.18, when using the namesx and uhnames modules, allows remote attackers to cause a denial of service (daemon crash) via a large number of channel users with crafted nicknames, idents, and long hostnames.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| inspircd | <= 1.1.17 | No fix listed |
| debian/inspircd(Debian:12) | < 1.1.18+dfsg-1 | 1.1.18+dfsg-1 |
| debian/inspircd(Debian:13) | < 1.1.18+dfsg-1 | 1.1.18+dfsg-1 |
References
- 29610 third-party-advisory vendor-advisory
- 30163 third-party-advisory
- GLSA-200805-08 vendor-advisory
- www.inspircd.org
- www.inspircd.org
- [oss-security] 20080422 CVE Request: inspircd mailing-list
- 28506 vdb-entry
- ADV-2008-1041 vdb-entry
- inspircd-multiple-dos(41543) vdb-entry
- Debian Security Tracker CVE-2008-1925 vendor-advisory