Vulnerabilities > CVE-2008-0285 - Unspecified vulnerability in Ngircd

047910
CVSS 0.0 - NONE
Attack vector
UNKNOWN
Attack complexity
UNKNOWN
Privileges required
UNKNOWN
Confidentiality impact
UNKNOWN
Integrity impact
UNKNOWN
Availability impact
UNKNOWN
ngircd
nessus
NVD
Published: 2008-01-16
Updated: 2024-11-21

Summary

ngIRCd 0.10.x before 0.10.4 and 0.11.0 before 0.11.0-pre2 allows remote attackers to cause a denial of service (crash) via crafted IRC PART message, which triggers an invalid dereference.

Vulnerable Configurations

Part Description Count
Application
Ngircd
1

Nessus

NASL familyGentoo Local Security Checks
NASL idGENTOO_GLSA-200801-13.NASL
descriptionThe remote host is affected by the vulnerability described in GLSA-200801-13 (ngIRCd: Denial of Service) The IRC_PART() function in the file irc-channel.c does not properly check the number of parameters, referencing an invalid pointer if no channel is supplied. Impact : A remote attacker can exploit this vulnerability to crash the ngIRCd daemon. Workaround : There is no known workaround at this time.
last seen2020-06-01
modified2020-06-02
plugin id30118
published2008-01-29
reporterThis script is Copyright (C) 2008-2019 Tenable Network Security, Inc.
sourcehttps://www.tenable.com/plugins/nessus/30118
titleGLSA-200801-13 : ngIRCd: Denial of Service

References