PT-2003-1652 · Digatech+3 · Digatech+4

Joel Eriksson · Published 2003-06-28 · Updated 2016-10-18 · CVE-2003-0478

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: Bahamut IRCd versions 1.4.35 and earlier digatech version 1.2.1 methane version 0.1.1 AndromedeIRCd version 1.2.3-Release ircd-RU (affected versions not specified)

Description: The issue allows remote attackers to cause a denial of service and possibly execute arbitrary code via a request containing format strings when the software is running in debug mode.

Recommendations: For Bahamut IRCd versions 1.4.35 and earlier, consider disabling debug mode until a patch is available. For digatech version 1.2.1, restrict access to the debug functionality to minimize the risk of exploitation. For methane version 0.1.1, avoid running the software in debug mode until the issue is resolved. For AndromedeIRCd version 1.2.3-Release, consider disabling the debug mode feature as a temporary workaround. For ircd-RU, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2003-0478

Affected Products

Andromedeircd

Bahamut Ircd

Digatech

Ircd-Ru

Methane

References · 5

• 🔥 https://exploit-db.com/exploits/22839 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2003-0478 · Security Note
• http://marc.info/?l=bugtraq&m=105673489525906&w=2 · Note
• http://marc.info/?l=bugtraq&m=105673555726823&w=2 · Note
• http://marc.info/?l=bugtraq&m=105665996104723&w=2 · Note