PT-2010-1324 · Oftc+2 · Oftc-Hybrid+2
David Leadbeater
·
Publicado
2010-02-04
·
Atualizado
2010-02-05
·
CVE-2009-4016
CVSS v2.0
6.8
Média
| Vetor | AV:N/AC:M/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
IRCD-hybrid versions 7.2.2 through 7.2.3
ircd-ratbox versions prior to 2.2.9
oftc-hybrid versions prior to 1.6.8
Description
The issue allows remote attackers to execute arbitrary code or cause a denial of service via a LINKS command, due to an integer underflow in the clean string function when flatten links is disabled.
Recommendations
For IRCD-hybrid versions 7.2.2 through 7.2.3, update to a version later than 7.2.3.
For ircd-ratbox versions prior to 2.2.9, update to version 2.2.9 or later.
For oftc-hybrid versions prior to 1.6.8, update to version 1.6.8 or later.
Correção
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Ircd-Hybrid
Ircd-Ratbox
Oftc-Hybrid