BID:26489

ngIRCd JOIN Command Parsing Denial Of Service Vulnerability

Info

ngIRCd JOIN Command Parsing Denial Of Service Vulnerability

Bugtraq ID:	26489
Class:	Unknown
CVE:	CVE-2007-6062
Remote:	Yes
Local:	No
Published:	Nov 19 2007 12:00AM
Updated:	Dec 18 2007 08:04PM
Credit:	The vendor reported this issue.
Vulnerable:	ngIRCd ngIRCd 0.10.2 ngIRCd ngIRCd 0.8.2 ngIRCd ngIRCd 0.8.1 ngIRCd ngIRCd 0.8 ngIRCd ngIRCd 0.7.7 ngIRCd ngIRCd 0.7.6 ngIRCd ngIRCd 0.7.5 ngIRCd ngIRCd 0.7.1 ngIRCd ngIRCd 0.7 ngIRCd ngIRCd 0.6.1 ngIRCd ngIRCd 0.6

Not Vulnerable:	ngIRCd ngIRCd 0.10.3

Discussion

ngIRCd JOIN Command Parsing Denial Of Service Vulnerability

ngIRCd is prone to a denial-of-service vulnerability.

Attackers can exploit this issue to deny service to legitimate users.

Versions prior to ngIRCd 0.10.3 are vulnerable.

Exploit / POC

ngIRCd JOIN Command Parsing Denial Of Service Vulnerability

Currently we are not aware of any working exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Solution / Fix

ngIRCd JOIN Command Parsing Denial Of Service Vulnerability

Solution:
The vendor has released ngIRCd 0.10.3 to address this issue. Please see the references for more information.

ngIRCd ngIRCd 0.10.2