PT-2010-4307 · Znc · Znc

Vincent Danen · Published 2010-08-17 · Updated 2010-08-18 · CVE-2010-2812

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions ZNC version 0.092

Description The issue allows remote attackers to cause a denial of service, resulting in an exception and daemon crash, by sending a PING command without an argument.

Recommendations For ZNC version 0.092, consider disabling the PING command functionality until a patch is available to prevent potential denial of service attacks.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2010-2812

Affected Products

Znc

References · 16

• https://osv.dev/vulnerability/CVE-2010-2812 · Vendor Advisory
• http://vupen.com/english/advisories/2010/2071 · Vendor Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2010-August/045385.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2010-2812 · Security Note
• http://lists.fedoraproject.org/pipermail/package-announce/2010-August/045386.html · Vendor Advisory
• http://secunia.com/advisories/40919 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2010-2812 · Vendor Advisory
• http://secunia.com/advisories/40970 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2010-2812 · Vendor Advisory
• http://znc.svn.sourceforge.net/viewvc/znc?view=revision&revision=2093 · Note
• http://securityfocus.com/bid/42314 · Note
• https://bugzilla.redhat.com/show_bug.cgi?id=622600 · Note
• http://marc.info/?l=oss-security&m=128152390219401&w=2 · Note
• http://znc.svn.sourceforge.net/viewvc/znc/trunk/Client.cpp?r1=2093&r2=2092&pathrev=2093 · Note
• http://marc.info/?l=oss-security&m=128146120727810&w=2 · Note