PT-2010-1699 · Unrealircd · Unrealircd

Alex Legler · Published 2010-06-15 · Updated 2010-10-28 · CVE-2009-4893

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions UnrealIRCd versions 3.2beta11 through 3.2.8

Description The issue is related to a buffer overflow that can be triggered when the allow::options::noident option is enabled. This can allow remote attackers to cause a denial of service, potentially leading to a crash, and may also enable the execution of arbitrary code via unspecified vectors.

Recommendations For UnrealIRCd versions 3.2beta11 through 3.2.8, consider disabling the allow::options::noident option as a temporary workaround to minimize the risk of exploitation.

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2009-4893

Affected Products

Unrealircd

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2009-4893 · Security Note
• http://unrealircd.com/txt/unrealsecadvisory.20090413.txt · Vendor Advisory
• http://security.gentoo.org/glsa/glsa-201006-21.xml · Vendor Advisory
• http://openwall.com/lists/oss-security/2010/06/14/13 · Note
• http://securityfocus.com/bid/42077 · Note