Vulnerabilities > CVE-2003-0478 - Denial-Of-Service vulnerability in Ircd
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
COMPLETE Integrity impact
COMPLETE Availability impact
COMPLETE network
low complexity
andromede
daniel-moss
hans-westerhof
wenet
bahamut
critical
nessus
exploit available
Summary
Format string vulnerability in (1) Bahamut IRCd 1.4.35 and earlier, and other IRC daemons based on Bahamut including (2) digatech 1.2.1, (3) methane 0.1.1, (4) AndromedeIRCd 1.2.3-Release, and (5) ircd-RU, when running in debug mode, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a request containing format strings.
Vulnerable Configurations
Part | Description | Count |
---|---|---|
Application | 1 | |
Application | 1 | |
Application | 1 | |
Application | 1 | |
OS | 1 |
Exploit-Db
description | methane IRCd 0.1.1 Remote Format String Vulnerability. CVE-2003-0478 . Dos exploit for linux platform |
id | EDB-ID:22839 |
last seen | 2016-02-02 |
modified | 2003-06-27 |
published | 2003-06-27 |
reporter | Dinos |
source | https://www.exploit-db.com/download/22839/ |
title | methane IRCd 0.1.1 - Remote Format String Vulnerability |
Nessus
NASL family | Gain a shell remotely |
NASL id | IRCD_FORMAT_STRING.NASL |
description | The remote host is running a version of ircd that could be vulnerable to a format string attack. An attacker could exploit this flaw to execute arbitrary code on this host, or simply to disable this service remotely. |
last seen | 2020-06-01 |
modified | 2020-06-02 |
plugin id | 11783 |
published | 2003-06-27 |
reporter | This script is Copyright (C) 2003-2018 Tenable Network Security, Inc. |
source | https://www.tenable.com/plugins/nessus/11783 |
title | Multiple Vendor IRC Daemon Debug Format String |
code |
|