PT-2008-3452 · Inspircd · Inspircd

Micah Anderson · Publicado 2008-04-23 · Atualizado 2020-09-14 · CVE-2008-1925

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions InspIRCd versions prior to 1.1.18

Description A buffer overflow issue allows remote attackers to cause a denial of service, resulting in a daemon crash. This occurs when a large number of channel users have crafted nicknames, idents, and long hostnames, specifically when the namesx and uhnames modules are in use.

Recommendations For versions prior to 1.1.18, update to version 1.1.18 or later to resolve the issue. As a temporary workaround, consider disabling the namesx and uhnames modules until a patch is available. Restrict access to channels with a large number of users to minimize the risk of exploitation.

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2008-1925

Produtos afetados

Inspircd

Referências · 13

• http://openwall.com/lists/oss-security/2008/04/22/3 · Nota
• http://vupen.com/english/advisories/2008/1041/references · Nota
• https://osv.dev/vulnerability/DEBIAN-CVE-2008-1925 · Aviso do Fabricante
• http://secunia.com/advisories/29610 · Aviso do Fabricante
• http://inspircd.org/bugtrack/view_bug.php?bug_id=438 · Nota
• https://security-tracker.debian.org/tracker/CVE-2008-1925 · Aviso do Fabricante
• http://inspircd.org/forum/showthread.php?t=2945 · Nota
• https://osv.dev/vulnerability/CVE-2008-1925 · Aviso do Fabricante
• http://secunia.com/advisories/30163 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/41543 · Nota
• http://securityfocus.com/bid/28506 · Nota
• http://security.gentoo.org/glsa/glsa-200805-08.xml · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2008-1925 · Nota de Segurança