PT-2010-1699 · Unrealircd · Unrealircd

Alex Legler · Publicado 2010-06-15 · Atualizado 2010-10-28 · CVE-2009-4893

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions UnrealIRCd versions 3.2beta11 through 3.2.8

Description The issue is related to a buffer overflow that can be triggered when the allow::options::noident option is enabled. This can allow remote attackers to cause a denial of service, potentially leading to a crash, and may also enable the execution of arbitrary code via unspecified vectors.

Recommendations For UnrealIRCd versions 3.2beta11 through 3.2.8, consider disabling the allow::options::noident option as a temporary workaround to minimize the risk of exploitation.

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2009-4893

Produtos afetados

Unrealircd

Referências · 5

• https://nvd.nist.gov/vuln/detail/CVE-2009-4893 · Nota de Segurança
• http://unrealircd.com/txt/unrealsecadvisory.20090413.txt · Aviso do Fabricante
• http://openwall.com/lists/oss-security/2010/06/14/13 · Nota
• http://securityfocus.com/bid/42077 · Nota
• http://security.gentoo.org/glsa/glsa-201006-21.xml · Aviso do Fabricante