PT-2008-3452 · Inspircd · Inspircd

Micah Anderson · Published 2008-04-23 · Updated 2020-09-14 · CVE-2008-1925

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions InspIRCd versions prior to 1.1.18

Description A buffer overflow issue allows remote attackers to cause a denial of service, resulting in a daemon crash. This occurs when a large number of channel users have crafted nicknames, idents, and long hostnames, specifically when the namesx and uhnames modules are in use.

Recommendations For versions prior to 1.1.18, update to version 1.1.18 or later to resolve the issue. As a temporary workaround, consider disabling the namesx and uhnames modules until a patch is available. Restrict access to channels with a large number of users to minimize the risk of exploitation.

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2008-1925

Affected Products

Inspircd

References · 13

• https://osv.dev/vulnerability/DEBIAN-CVE-2008-1925 · Vendor Advisory
• http://secunia.com/advisories/29610 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2008-1925 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2008-1925 · Vendor Advisory
• http://security.gentoo.org/glsa/glsa-200805-08.xml · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2008-1925 · Security Note
• http://openwall.com/lists/oss-security/2008/04/22/3 · Note
• http://vupen.com/english/advisories/2008/1041/references · Note
• http://inspircd.org/bugtrack/view_bug.php?bug_id=438 · Note
• http://inspircd.org/forum/showthread.php?t=2945 · Note
• http://secunia.com/advisories/30163 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/41543 · Note
• http://securityfocus.com/bid/28506 · Note