{"api_version":"1","generated_at":"2026-07-24T19:37:29+00:00","cve":"CVE-2009-1789","urls":{"html":"https://cve.report/CVE-2009-1789","api":"https://cve.report/api/cve/CVE-2009-1789.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2009-1789","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2009-1789"},"summary":{"title":"CVE-2009-1789","description":"mod/server.mod/servmsg.c in Eggheads Eggdrop and Windrop 1.6.19 and earlier allows remote attackers to cause a denial of service (crash) via a crafted PRIVMSG that causes an empty string to trigger a negative string length copy.  NOTE: this issue exists because of an incorrect fix for CVE-2007-2807.","state":"PUBLISHED","assigner":"mitre","published_at":"2009-05-26 16:30:02","updated_at":"2026-04-23 00:35:47"},"problem_types":["NVD-CWE-Other","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"4.3","severity":"","vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","data":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"}}],"references":[{"url":"http://osvdb.org/54460","name":"http://osvdb.org/54460","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=528778","name":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=528778","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"#528778 - eggdrop: incomplete patch for CVE-2007-2807 - Debian Bug report logs","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/34985","name":"http://www.securityfocus.com/bid/34985","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"504 Gateway Time-out","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://secunia.com/advisories/35104","name":"http://secunia.com/advisories/35104","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"Eggdrop servmsg.c Denial of Service Vulnerability - Advisories - Community","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:126","name":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:126","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Support / Security / Advisories /  / MDVSA-2009:126 | Mandriva","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/archive/1/503574","name":"http://www.securityfocus.com/archive/1/503574","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"SecurityFocus","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://cvs.eggheads.org/viewvc/viewvc.cgi/eggdrop1.6/doc/Changes1.6?revision=1.20&view=markup","name":"http://cvs.eggheads.org/viewvc/viewvc.cgi/eggdrop1.6/doc/Changes1.6?revision=1.20&view=markup","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"],"title":"[cvs] Contents of /eggdrop1.6/doc/Changes1.6","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01337.html","name":"https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01337.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"[SECURITY] Fedora 10 Update: eggdrop-1.6.19-4.fc10","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.vupen.com/english/advisories/2009/1340","name":"http://www.vupen.com/english/advisories/2009/1340","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"],"title":"Webmail : Solution de messagerie professionnelle - OVHcloud- OVH","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.exploit-db.com/exploits/8695","name":"https://www.exploit-db.com/exploits/8695","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Eggdrop/Windrop 1.6.19 ctcpbuf Remote Crash Vulnerability","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/35158","name":"http://secunia.com/advisories/35158","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Fedora update for eggdrop - Secunia Advisories - Vulnerability Information - Secunia.com","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50547","name":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50547","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2009-05/0129.html","name":"http://archives.neohapsis.com/archives/fulldisclosure/2009-05/0129.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"text/html","httpstatus":"-1","archivestatus":"200"},{"url":"http://secunia.com/advisories/35690","name":"http://secunia.com/advisories/35690","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Debian update for eggdrop - Secunia Advisories - Vulnerability Information - Secunia.com","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.debian.org/security/2009/dsa-1826","name":"http://www.debian.org/security/2009/dsa-1826","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Debian -- Security Information -- DSA-1826-1 eggdrop","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01333.html","name":"https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01333.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"[SECURITY] Fedora 9 Update: eggdrop-1.6.19-4.fc9","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2009-1789","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2009-1789","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2009","cve_id":"1789","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"eggheads","cpe5":"eggdrop","cpe6":"1.6.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"1789","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"eggheads","cpe5":"eggdrop","cpe6":"1.6.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"1789","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"eggheads","cpe5":"eggdrop","cpe6":"1.6.10","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"1789","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"eggheads","cpe5":"eggdrop","cpe6":"1.6.11","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"1789","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"eggheads","cpe5":"eggdrop","cpe6":"1.6.12","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"1789","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"eggheads","cpe5":"eggdrop","cpe6":"1.6.13","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"1789","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"eggheads","cpe5":"eggdrop","cpe6":"1.6.14","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"1789","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"eggheads","cpe5":"eggdrop","cpe6":"1.6.15","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"1789","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"eggheads","cpe5":"eggdrop","cpe6":"1.6.16","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"1789","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"eggheads","cpe5":"eggdrop","cpe6":"1.6.17","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"1789","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"eggheads","cpe5":"eggdrop","cpe6":"1.6.18","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"1789","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"eggheads","cpe5":"eggdrop","cpe6":"1.6.18","cpe7":"rc1","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"1789","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"eggheads","cpe5":"eggdrop","cpe6":"1.6.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"1789","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"eggheads","cpe5":"eggdrop","cpe6":"1.6.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"1789","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"eggheads","cpe5":"eggdrop","cpe6":"1.6.4","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"1789","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"eggheads","cpe5":"eggdrop","cpe6":"1.6.5","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"1789","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"eggheads","cpe5":"eggdrop","cpe6":"1.6.6","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"1789","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"eggheads","cpe5":"eggdrop","cpe6":"1.6.7","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"1789","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"eggheads","cpe5":"eggdrop","cpe6":"1.6.8","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"1789","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"eggheads","cpe5":"eggdrop","cpe6":"1.6.9","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"1789","vulnerable":"1","versionEndIncluding":"1.6.19","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"eggheads","cpe5":"eggdrop_irc_bot","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"1789","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"philip_moore","cpe5":"windrop","cpe6":"1.4.4","cpe7":"*","cpe8":"final","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"1789","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"philip_moore","cpe5":"windrop","cpe6":"1.4.6","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"1789","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"philip_moore","cpe5":"windrop","cpe6":"1.5.4","cpe7":"*","cpe8":"final","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"1789","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"philip_moore","cpe5":"windrop","cpe6":"1.5.4","cpe7":"rc1","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"1789","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"philip_moore","cpe5":"windrop","cpe6":"1.5.4","cpe7":"rc2","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"1789","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"philip_moore","cpe5":"windrop","cpe6":"1.5.4a","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"1789","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"philip_moore","cpe5":"windrop","cpe6":"1.6.0","cpe7":"*","cpe8":"final","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"1789","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"philip_moore","cpe5":"windrop","cpe6":"1.6.0","cpe7":"rc1","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"1789","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"philip_moore","cpe5":"windrop","cpe6":"1.6.0","cpe7":"rc1-rel2","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"1789","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"philip_moore","cpe5":"windrop","cpe6":"1.6.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"1789","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"philip_moore","cpe5":"windrop","cpe6":"1.6.10","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"1789","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"philip_moore","cpe5":"windrop","cpe6":"1.6.12","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"1789","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"philip_moore","cpe5":"windrop","cpe6":"1.6.13","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"1789","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"philip_moore","cpe5":"windrop","cpe6":"1.6.15","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"1789","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"philip_moore","cpe5":"windrop","cpe6":"1.6.16","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"1789","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"philip_moore","cpe5":"windrop","cpe6":"1.6.17","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"1789","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"philip_moore","cpe5":"windrop","cpe6":"1.6.18","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"1789","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"philip_moore","cpe5":"windrop","cpe6":"1.6.19\\+ctcpfix","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"1789","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"philip_moore","cpe5":"windrop","cpe6":"1.6.2\\+bindsfix","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"1789","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"philip_moore","cpe5":"windrop","cpe6":"1.6.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"1789","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"philip_moore","cpe5":"windrop","cpe6":"1.6.4","cpe7":"sr1","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"1789","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"philip_moore","cpe5":"windrop","cpe6":"1.6.6","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"1789","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"philip_moore","cpe5":"windrop","cpe6":"1.6.7","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"1789","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"philip_moore","cpe5":"windrop","cpe6":"1.6.8","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"1789","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"philip_moore","cpe5":"windrop","cpe6":"1.6.9","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"1789","vulnerable":"1","versionEndIncluding":"1.6.19","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"philip_moore","cpe5":"windrop","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-07T05:27:54.421Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"eggdrop-servmsg-dos(50547)","tags":["vdb-entry","x_refsource_XF","x_transferred"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50547"},{"name":"35104","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/35104"},{"name":"54460","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"],"url":"http://osvdb.org/54460"},{"name":"20090515 eggdrop/windrop remote crash vulnerability","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"],"url":"http://www.securityfocus.com/archive/1/503574"},{"name":"ADV-2009-1340","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"],"url":"http://www.vupen.com/english/advisories/2009/1340"},{"name":"FEDORA-2009-5572","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred"],"url":"https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01337.html"},{"name":"8695","tags":["exploit","x_refsource_EXPLOIT-DB","x_transferred"],"url":"https://www.exploit-db.com/exploits/8695"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://cvs.eggheads.org/viewvc/viewvc.cgi/eggdrop1.6/doc/Changes1.6?revision=1.20&view=markup"},{"name":"35690","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/35690"},{"name":"20090514 eggdrop/windrop remote crash vulnerability","tags":["mailing-list","x_refsource_FULLDISC","x_transferred"],"url":"http://archives.neohapsis.com/archives/fulldisclosure/2009-05/0129.html"},{"name":"MDVSA-2009:126","tags":["vendor-advisory","x_refsource_MANDRIVA","x_transferred"],"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:126"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=528778"},{"name":"34985","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/34985"},{"name":"FEDORA-2009-5568","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred"],"url":"https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01333.html"},{"name":"35158","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/35158"},{"name":"DSA-1826","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred"],"url":"http://www.debian.org/security/2009/dsa-1826"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2009-05-14T00:00:00.000Z","descriptions":[{"lang":"en","value":"mod/server.mod/servmsg.c in Eggheads Eggdrop and Windrop 1.6.19 and earlier allows remote attackers to cause a denial of service (crash) via a crafted PRIVMSG that causes an empty string to trigger a negative string length copy.  NOTE: this issue exists because of an incorrect fix for CVE-2007-2807."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2017-09-28T12:57:01.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"name":"eggdrop-servmsg-dos(50547)","tags":["vdb-entry","x_refsource_XF"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50547"},{"name":"35104","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/35104"},{"name":"54460","tags":["vdb-entry","x_refsource_OSVDB"],"url":"http://osvdb.org/54460"},{"name":"20090515 eggdrop/windrop remote crash vulnerability","tags":["mailing-list","x_refsource_BUGTRAQ"],"url":"http://www.securityfocus.com/archive/1/503574"},{"name":"ADV-2009-1340","tags":["vdb-entry","x_refsource_VUPEN"],"url":"http://www.vupen.com/english/advisories/2009/1340"},{"name":"FEDORA-2009-5572","tags":["vendor-advisory","x_refsource_FEDORA"],"url":"https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01337.html"},{"name":"8695","tags":["exploit","x_refsource_EXPLOIT-DB"],"url":"https://www.exploit-db.com/exploits/8695"},{"tags":["x_refsource_CONFIRM"],"url":"http://cvs.eggheads.org/viewvc/viewvc.cgi/eggdrop1.6/doc/Changes1.6?revision=1.20&view=markup"},{"name":"35690","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/35690"},{"name":"20090514 eggdrop/windrop remote crash vulnerability","tags":["mailing-list","x_refsource_FULLDISC"],"url":"http://archives.neohapsis.com/archives/fulldisclosure/2009-05/0129.html"},{"name":"MDVSA-2009:126","tags":["vendor-advisory","x_refsource_MANDRIVA"],"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:126"},{"tags":["x_refsource_CONFIRM"],"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=528778"},{"name":"34985","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/34985"},{"name":"FEDORA-2009-5568","tags":["vendor-advisory","x_refsource_FEDORA"],"url":"https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01333.html"},{"name":"35158","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/35158"},{"name":"DSA-1826","tags":["vendor-advisory","x_refsource_DEBIAN"],"url":"http://www.debian.org/security/2009/dsa-1826"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2009-1789","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"mod/server.mod/servmsg.c in Eggheads Eggdrop and Windrop 1.6.19 and earlier allows remote attackers to cause a denial of service (crash) via a crafted PRIVMSG that causes an empty string to trigger a negative string length copy.  NOTE: this issue exists because of an incorrect fix for CVE-2007-2807."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"eggdrop-servmsg-dos(50547)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50547"},{"name":"35104","refsource":"SECUNIA","url":"http://secunia.com/advisories/35104"},{"name":"54460","refsource":"OSVDB","url":"http://osvdb.org/54460"},{"name":"20090515 eggdrop/windrop remote crash vulnerability","refsource":"BUGTRAQ","url":"http://www.securityfocus.com/archive/1/503574"},{"name":"ADV-2009-1340","refsource":"VUPEN","url":"http://www.vupen.com/english/advisories/2009/1340"},{"name":"FEDORA-2009-5572","refsource":"FEDORA","url":"https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01337.html"},{"name":"8695","refsource":"EXPLOIT-DB","url":"https://www.exploit-db.com/exploits/8695"},{"name":"http://cvs.eggheads.org/viewvc/viewvc.cgi/eggdrop1.6/doc/Changes1.6?revision=1.20&view=markup","refsource":"CONFIRM","url":"http://cvs.eggheads.org/viewvc/viewvc.cgi/eggdrop1.6/doc/Changes1.6?revision=1.20&view=markup"},{"name":"35690","refsource":"SECUNIA","url":"http://secunia.com/advisories/35690"},{"name":"20090514 eggdrop/windrop remote crash vulnerability","refsource":"FULLDISC","url":"http://archives.neohapsis.com/archives/fulldisclosure/2009-05/0129.html"},{"name":"MDVSA-2009:126","refsource":"MANDRIVA","url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:126"},{"name":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=528778","refsource":"CONFIRM","url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=528778"},{"name":"34985","refsource":"BID","url":"http://www.securityfocus.com/bid/34985"},{"name":"FEDORA-2009-5568","refsource":"FEDORA","url":"https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01333.html"},{"name":"35158","refsource":"SECUNIA","url":"http://secunia.com/advisories/35158"},{"name":"DSA-1826","refsource":"DEBIAN","url":"http://www.debian.org/security/2009/dsa-1826"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2009-1789","datePublished":"2009-05-26T16:00:00.000Z","dateReserved":"2009-05-26T00:00:00.000Z","dateUpdated":"2024-08-07T05:27:54.421Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2009-05-26 16:30:02","lastModifiedDate":"2026-04-23 00:35:47","problem_types":["NVD-CWE-Other","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:eggheads:eggdrop:1.6.0:*:*:*:*:*:*:*","matchCriteriaId":"B949FDB5-004E-4D1A-B231-B12B0530D8B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:eggheads:eggdrop:1.6.1:*:*:*:*:*:*:*","matchCriteriaId":"122A9276-FBAE-4ACB-8B57-1F11316AE6CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:eggheads:eggdrop:1.6.2:*:*:*:*:*:*:*","matchCriteriaId":"38C0C2B5-D834-481B-B0F4-52815D5F05D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:eggheads:eggdrop:1.6.3:*:*:*:*:*:*:*","matchCriteriaId":"0DA76910-DA6A-431E-A4D3-65F67B06DE8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:eggheads:eggdrop:1.6.4:*:*:*:*:*:*:*","matchCriteriaId":"ADC43937-427B-440C-9057-81B030F703CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:eggheads:eggdrop:1.6.5:*:*:*:*:*:*:*","matchCriteriaId":"0B9BC3A5-F83F-4A54-8F1D-01A26F4CE7FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:eggheads:eggdrop:1.6.6:*:*:*:*:*:*:*","matchCriteriaId":"85C89850-5063-4A3F-AD36-A7BB9C277196"},{"vulnerable":true,"criteria":"cpe:2.3:a:eggheads:eggdrop:1.6.7:*:*:*:*:*:*:*","matchCriteriaId":"B027835C-D277-404A-8663-B11DAD15200A"},{"vulnerable":true,"criteria":"cpe:2.3:a:eggheads:eggdrop:1.6.8:*:*:*:*:*:*:*","matchCriteriaId":"2468A8A0-0916-40AF-B666-37F4E09D2F46"},{"vulnerable":true,"criteria":"cpe:2.3:a:eggheads:eggdrop:1.6.9:*:*:*:*:*:*:*","matchCriteriaId":"A2FAD548-8685-4C1B-85EB-EDA5A3490A6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:eggheads:eggdrop:1.6.10:*:*:*:*:*:*:*","matchCriteriaId":"591CEC1D-0E78-4F06-897E-5EFC6C3EB22D"},{"vulnerable":true,"criteria":"cpe:2.3:a:eggheads:eggdrop:1.6.11:*:*:*:*:*:*:*","matchCriteriaId":"8AFEFA8F-E0BD-4B16-91F0-0D0CCAFD9A0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:eggheads:eggdrop:1.6.12:*:*:*:*:*:*:*","matchCriteriaId":"846E8578-2E43-40FB-AFBE-8002B3C6360F"},{"vulnerable":true,"criteria":"cpe:2.3:a:eggheads:eggdrop:1.6.13:*:*:*:*:*:*:*","matchCriteriaId":"A966576E-C1E1-413B-9BC7-13A581F8C278"},{"vulnerable":true,"criteria":"cpe:2.3:a:eggheads:eggdrop:1.6.14:*:*:*:*:*:*:*","matchCriteriaId":"EC103352-44FE-4629-9E78-4398B8E621C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:eggheads:eggdrop:1.6.15:*:*:*:*:*:*:*","matchCriteriaId":"392B2FDA-0BB1-4525-B892-96074BCD68D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:eggheads:eggdrop:1.6.16:*:*:*:*:*:*:*","matchCriteriaId":"2A36497B-FC48-458D-9637-E5FD49DAD515"},{"vulnerable":true,"criteria":"cpe:2.3:a:eggheads:eggdrop:1.6.17:*:*:*:*:*:*:*","matchCriteriaId":"19B44064-F334-42C0-AC66-B82DC2227857"},{"vulnerable":true,"criteria":"cpe:2.3:a:eggheads:eggdrop:1.6.18:*:*:*:*:*:*:*","matchCriteriaId":"344C8A04-1E35-4F1D-8283-3E520867489C"},{"vulnerable":true,"criteria":"cpe:2.3:a:eggheads:eggdrop:1.6.18:rc1:*:*:*:*:*:*","matchCriteriaId":"641DAB73-091A-45E2-850D-EB3E852645FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:eggheads:eggdrop_irc_bot:*:*:*:*:*:*:*:*","versionEndIncluding":"1.6.19","matchCriteriaId":"3ACCBBE9-03EC-496E-8163-1BEC53651211"},{"vulnerable":true,"criteria":"cpe:2.3:a:philip_moore:windrop:*:*:*:*:*:*:*:*","versionEndIncluding":"1.6.19","matchCriteriaId":"2F67FC40-34BD-4266-85F8-10CEEE66C377"},{"vulnerable":true,"criteria":"cpe:2.3:a:philip_moore:windrop:1.4.4:*:final:*:*:*:*:*","matchCriteriaId":"8D6C2110-D8D8-4864-A556-E907B98E185F"},{"vulnerable":true,"criteria":"cpe:2.3:a:philip_moore:windrop:1.4.6:*:*:*:*:*:*:*","matchCriteriaId":"F3D82640-7F8A-45F8-9B41-A09BB37B62A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:philip_moore:windrop:1.5.4:*:final:*:*:*:*:*","matchCriteriaId":"58730915-EE80-4CDF-9196-CC96B7835C27"},{"vulnerable":true,"criteria":"cpe:2.3:a:philip_moore:windrop:1.5.4:rc1:*:*:*:*:*:*","matchCriteriaId":"BD84BF3B-F6D9-41CA-9A2C-F09F6F00B39F"},{"vulnerable":true,"criteria":"cpe:2.3:a:philip_moore:windrop:1.5.4:rc2:*:*:*:*:*:*","matchCriteriaId":"D83AD2BC-CD73-4A85-8E12-E15EEE74D85F"},{"vulnerable":true,"criteria":"cpe:2.3:a:philip_moore:windrop:1.5.4a:*:*:*:*:*:*:*","matchCriteriaId":"3774084D-7BB9-4F70-BDB3-FE7796EE513B"},{"vulnerable":true,"criteria":"cpe:2.3:a:philip_moore:windrop:1.6.0:*:final:*:*:*:*:*","matchCriteriaId":"0C86A3CE-5522-4924-B2B9-2C81710BEF82"},{"vulnerable":true,"criteria":"cpe:2.3:a:philip_moore:windrop:1.6.0:rc1:*:*:*:*:*:*","matchCriteriaId":"537EA552-06C8-4AFE-960D-468A70157318"},{"vulnerable":true,"criteria":"cpe:2.3:a:philip_moore:windrop:1.6.0:rc1-rel2:*:*:*:*:*:*","matchCriteriaId":"4112B1DF-6883-45B4-823A-145275FE672A"},{"vulnerable":true,"criteria":"cpe:2.3:a:philip_moore:windrop:1.6.1:*:*:*:*:*:*:*","matchCriteriaId":"98797B0A-5979-493D-968F-ED20F26F9EBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:philip_moore:windrop:1.6.2\\+bindsfix:*:*:*:*:*:*:*","matchCriteriaId":"5239C772-554E-4E90-904C-499D419E87FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:philip_moore:windrop:1.6.3:*:*:*:*:*:*:*","matchCriteriaId":"4D43A10B-66AE-429B-B939-E3862D4F1EB9"},{"vulnerable":true,"criteria":"cpe:2.3:a:philip_moore:windrop:1.6.4:sr1:*:*:*:*:*:*","matchCriteriaId":"75918B14-B217-47D1-988C-B47CFA6D142F"},{"vulnerable":true,"criteria":"cpe:2.3:a:philip_moore:windrop:1.6.6:*:*:*:*:*:*:*","matchCriteriaId":"3115178C-6CF4-45B5-A84F-2D770DAFC600"},{"vulnerable":true,"criteria":"cpe:2.3:a:philip_moore:windrop:1.6.7:*:*:*:*:*:*:*","matchCriteriaId":"57740B2C-08DA-41E2-9F1B-69789A32DC76"},{"vulnerable":true,"criteria":"cpe:2.3:a:philip_moore:windrop:1.6.8:*:*:*:*:*:*:*","matchCriteriaId":"8D02A42B-C8A5-46D4-9E59-F06D3490DCDE"},{"vulnerable":true,"criteria":"cpe:2.3:a:philip_moore:windrop:1.6.9:*:*:*:*:*:*:*","matchCriteriaId":"02DFF7AE-89EF-4E1B-8EF6-D6505EC5CDCA"},{"vulnerable":true,"criteria":"cpe:2.3:a:philip_moore:windrop:1.6.10:*:*:*:*:*:*:*","matchCriteriaId":"D566B296-E828-4FF5-A6CC-3A4216EF4200"},{"vulnerable":true,"criteria":"cpe:2.3:a:philip_moore:windrop:1.6.12:*:*:*:*:*:*:*","matchCriteriaId":"7380F17C-1AA5-4A02-A9FD-B7A45EE612CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:philip_moore:windrop:1.6.13:*:*:*:*:*:*:*","matchCriteriaId":"CB09FFB8-9A04-4874-823D-5140D2F0AC15"},{"vulnerable":true,"criteria":"cpe:2.3:a:philip_moore:windrop:1.6.15:*:*:*:*:*:*:*","matchCriteriaId":"4D8D2814-F718-4EDE-B56F-D392FB7B534F"},{"vulnerable":true,"criteria":"cpe:2.3:a:philip_moore:windrop:1.6.16:*:*:*:*:*:*:*","matchCriteriaId":"CFCAF4B0-4C86-4C47-9C31-CFBAFFB8B739"},{"vulnerable":true,"criteria":"cpe:2.3:a:philip_moore:windrop:1.6.17:*:*:*:*:*:*:*","matchCriteriaId":"8DBC15B0-5E0A-4B6D-AAE9-C25E59450BAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:philip_moore:windrop:1.6.18:*:*:*:*:*:*:*","matchCriteriaId":"AC921FD5-53F7-4430-8EFA-E7363597099A"},{"vulnerable":true,"criteria":"cpe:2.3:a:philip_moore:windrop:1.6.19\\+ctcpfix:*:*:*:*:*:*:*","matchCriteriaId":"E1724543-C2ED-48F3-8DEC-61CA586CB505"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2009","CveId":"1789","Ordinal":"1","Title":"CVE-2009-1789","CVE":"CVE-2009-1789","Year":"2009"},"notes":[{"CveYear":"2009","CveId":"1789","Ordinal":"1","NoteData":"mod/server.mod/servmsg.c in Eggheads Eggdrop and Windrop 1.6.19 and earlier allows remote attackers to cause a denial of service (crash) via a crafted PRIVMSG that causes an empty string to trigger a negative string length copy.  NOTE: this issue exists because of an incorrect fix for CVE-2007-2807.","Type":"Description","Title":"CVE-2009-1789"},{"CveYear":"2009","CveId":"1789","Ordinal":"2","NoteData":"2009-05-26","Type":"Other","Title":"Published"},{"CveYear":"2009","CveId":"1789","Ordinal":"3","NoteData":"2017-09-28","Type":"Other","Title":"Modified"}]}}}