PT-2007-2893 · Rhapsody · Rhapsody Irc

Starcadi · Publicado 2007-03-19 · Atualizado 2018-10-16 · CVE-2007-1502

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Rhapsody IRC version 0.28b

Description The issue allows remote attackers to execute arbitrary code due to multiple buffer overflows. This can be achieved through various means, including a long command, a long server argument to the connect or server commands, a long nick argument to the nick command, or a long nick or message argument to the ctcp, chat, notice, message (msg), or query commands.

Recommendations For Rhapsody IRC version 0.28b, consider disabling the affected commands (connect, server, nick, ctcp, chat, notice, message, query) until a patch is available to prevent exploitation. Restrict access to these commands to minimize the risk of arbitrary code execution. At the moment, there is no information about a newer version that contains a fix for this issue.

Correção

Identificadores relacionados

CVE-2007-1502

Produtos afetados

Rhapsody Irc

Referências · 7

• http://securityfocus.com/bid/23011 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-1502 · Nota de Segurança
• http://securityfocus.com/archive/1/463092/100/0/threaded · Nota
• http://osvdb.org/35002 · Nota
• http://securityreason.com/securityalert/2447 · Nota
• http://osvdb.org/35004 · Nota
• http://osvdb.org/35003 · Nota