CVE-2012-6084 modules/m_capab.c in (1) ircd-ratbox before 3.0.8 and (2) Charybdis before 3.4.2 does not properly support capability negotiation during server handshakes, which allows remote attackers to cause a den...
MediumCVSS 5.0
EPSS 3.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
modules/m_capab.c in (1) ircd-ratbox before 3.0.8 and (2) Charybdis before 3.4.2 does not properly support capability negotiation during server handshakes, which allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a malformed request.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ircd-ratbox | = 1.0 | No fix listed |
| ircd-ratbox | = 1.1.1 | No fix listed |
| ircd-ratbox | = 1.1.2 | No fix listed |
| ircd-ratbox | = 1.2.1 | No fix listed |
| ircd-ratbox | = 1.2.2 | No fix listed |
| ircd-ratbox | = 1.2.3 | No fix listed |
| ircd-ratbox | = 1.3 | No fix listed |
| ircd-ratbox | = 1.3.1 | No fix listed |
| ircd-ratbox | = 1.3.2 | No fix listed |
| ircd-ratbox | = 1.4 | No fix listed |
| ircd-ratbox | = 1.4-rc1 | No fix listed |
| ircd-ratbox | = 1.4-rc2 | No fix listed |
| ircd-ratbox | = 1.5 | No fix listed |
| ircd-ratbox | = 1.5.1 | No fix listed |
| ircd-ratbox | = 1.5.2 | No fix listed |
| ircd-ratbox | = 1.5.3 | No fix listed |
| ircd-ratbox | = 2.0.1 | No fix listed |
| ircd-ratbox | = 2.0.2 | No fix listed |
| ircd-ratbox | = 2.0.3 | No fix listed |
| ircd-ratbox | = 2.0.4 | No fix listed |
| ircd-ratbox | = 2.0.5 | No fix listed |
| ircd-ratbox | = 2.0.6 | No fix listed |
| ircd-ratbox | = 2.0.7 | No fix listed |
| ircd-ratbox | = 2.0.8 | No fix listed |
| ircd-ratbox | = 2.0.9 | No fix listed |
Show 27 more
| Product | Affected versions | Fixed in |
|---|---|---|
| ircd-ratbox | = 2.0.10 | No fix listed |
| ircd-ratbox | = 2.0.11 | No fix listed |
| ircd-ratbox | = 2.1.0-beta1 | No fix listed |
| ircd-ratbox | = 2.1.0-beta2 | No fix listed |
| ircd-ratbox | = 2.1.1 | No fix listed |
| ircd-ratbox | = 2.1.2 | No fix listed |
| ircd-ratbox | = 2.1.3 | No fix listed |
| ircd-ratbox | = 2.1.4 | No fix listed |
| ircd-ratbox | = 2.1.5 | No fix listed |
| ircd-ratbox | = 2.1.6 | No fix listed |
| ircd-ratbox | = 2.1.7 | No fix listed |
| ircd-ratbox | = 2.1.8 | No fix listed |
| ircd-ratbox | = 2.2.0 | No fix listed |
| ircd-ratbox | = 2.2.0-rc1 | No fix listed |
| ircd-ratbox | = 2.2.0-rc2 | No fix listed |
| ircd-ratbox | = 2.2.0-rc3 | No fix listed |
| ircd-ratbox | = 2.2.1 | No fix listed |
| ircd-ratbox | = 2.2.2 | No fix listed |
| ircd-ratbox | = 2.2.3 | No fix listed |
| ircd-ratbox | = 2.2.4 | No fix listed |
| ircd-ratbox | = 2.2.5 | No fix listed |
| ircd-ratbox | = 2.2.6 | No fix listed |
| ircd-ratbox | = 2.2.7 | No fix listed |
| ircd-ratbox | = 2.2.7.1 | No fix listed |
| ircd-ratbox | = 2.2.8 | No fix listed |
| ircd-ratbox | = 2.2.9 | No fix listed |
| ratbox ircd-ratbox | <= 3.0.7 | No fix listed |
References
- [oss-security] 20130101 Re: Charybdis: Improper assumptions in the server handshake code may lead to a remote crash mailing-list patch
- rabbit.dereferenced.org
- DSA-2612 vendor-advisory
- www.ratbox.org patch
- www.stack.nl patch
- github.com patch