PT-2010-4307 · Znc · Znc

Vincent Danen · Publicado 2010-08-17 · Atualizado 2010-08-18 · CVE-2010-2812

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions ZNC version 0.092

Description The issue allows remote attackers to cause a denial of service, resulting in an exception and daemon crash, by sending a PING command without an argument.

Recommendations For ZNC version 0.092, consider disabling the PING command functionality until a patch is available to prevent potential denial of service attacks.

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2010-2812

Produtos afetados

Znc

Referências · 16

• https://osv.dev/vulnerability/CVE-2010-2812 · Aviso do Fabricante
• http://znc.svn.sourceforge.net/viewvc/znc?view=revision&revision=2093 · Nota
• http://vupen.com/english/advisories/2010/2071 · Aviso do Fabricante
• http://lists.fedoraproject.org/pipermail/package-announce/2010-August/045385.html · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2010-2812 · Nota de Segurança
• http://lists.fedoraproject.org/pipermail/package-announce/2010-August/045386.html · Aviso do Fabricante
• http://securityfocus.com/bid/42314 · Nota
• https://bugzilla.redhat.com/show_bug.cgi?id=622600 · Nota
• http://secunia.com/advisories/40919 · Aviso do Fabricante
• http://marc.info/?l=oss-security&m=128152390219401&w=2 · Nota
• http://znc.svn.sourceforge.net/viewvc/znc/trunk/Client.cpp?r1=2093&r2=2092&pathrev=2093 · Nota
• http://marc.info/?l=oss-security&m=128146120727810&w=2 · Nota
• http://marc.info/?l=oss-security&m=128146352011964&w=2 · Nota
• https://security-tracker.debian.org/tracker/CVE-2010-2812 · Aviso do Fabricante
• http://secunia.com/advisories/40970 · Aviso do Fabricante