PT-2003-1652 · Digatech+3 · Digatech+4
Joel Eriksson
·
Publicado
2003-06-28
·
Atualizado
2016-10-18
·
CVE-2003-0478
CVSS v2.0
10
Alta
| Vetor | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions:
Bahamut IRCd versions 1.4.35 and earlier
digatech version 1.2.1
methane version 0.1.1
AndromedeIRCd version 1.2.3-Release
ircd-RU (affected versions not specified)
Description:
The issue allows remote attackers to cause a denial of service and possibly execute arbitrary code via a request containing format strings when the software is running in debug mode.
Recommendations:
For Bahamut IRCd versions 1.4.35 and earlier, consider disabling debug mode until a patch is available.
For digatech version 1.2.1, restrict access to the debug functionality to minimize the risk of exploitation.
For methane version 0.1.1, avoid running the software in debug mode until the issue is resolved.
For AndromedeIRCd version 1.2.3-Release, consider disabling the debug mode feature as a temporary workaround.
For ircd-RU, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Andromedeircd
Bahamut Ircd
Digatech
Ircd-Ru
Methane