PT-2006-3127 · Cgi:Irc · Cgi:Irc

Paul Wise · Published 2006-05-02 · Updated 2017-07-20 · CVE-2006-2148

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions CGI:IRC versions prior to 0.5.8

Description The issue is related to multiple buffer overflows in the client.c file. This could potentially allow remote attackers to execute arbitrary code. The attack vectors include cookies and the query string.

Recommendations For versions prior to 0.5.8, update to version 0.5.8 or later to resolve the issue.

Fix

Related Identifiers

CVE-2006-2148

DSA-1052-1

Affected Products

Cgi:Irc

References · 11

• http://secunia.com/advisories/19922 · Vendor Advisory
• http://cvs.cgiirc.org/chngview?cn=263 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2006-2148 · Security Note
• http://debian.org/security/2006/dsa-1052 · Vendor Advisory
• http://cvs.cgiirc.org/timeline?d=300&e=2006-Apr-30&c=2&px=&s=0&dm=1&x=1&m=1 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/26173 · Note
• http://securityfocus.com/bid/17799 · Note
• http://cvs.cgiirc.org/chngview?cn=283 · Note
• http://secunia.com/advisories/19985 · Note
• http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=365680 · Note
• http://vupen.com/english/advisories/2006/1607 · Note