IRC Services Password Parsing Remote Denial Of Service Vulnerability

Bugtraq ID:	26517
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2007-6122 CVE-2007-6123
Remote:	Yes
Local:	No
Published:	Nov 21 2007 12:00AM
Updated:	Dec 18 2007 08:06PM
Credit:	loverboy is credited with the discovery of this issue.
Vulnerable:	IRC Services IRC Services 5.1.8 IRC Services IRC Services 5.1.7 IRC Services IRC Services 5.1.6 IRC Services IRC Services 5.0.62 Gentoo Linux
Not Vulnerable:	IRC Services IRC Services 5.1.9 IRC Services IRC Services 5.0.63

IRC Services Password Parsing Remote Denial Of Service Vulnerability

IRC Services are prone to a remote denial-of-service vulnerability because it fails to adequately sanitize user-supplied input.

Attackers can exploit this issue to crash the application and deny service to legitimate users.

This issue affects versions prior to IRC Services 5.0.63 and 5.1.9.

IRC Services Password Parsing Remote Denial Of Service Vulnerability

Currently we are not aware of any working exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

IRC Services Password Parsing Remote Denial Of Service Vulnerability

Solution:
The vendor has released updates to address this issue. Please see the references for more information.


IRC Services IRC Services 5.1.6

• IRC Services ircservices-5.1.9.tar.gz
  http://www.ircservices.za.net/download/ircservices-5.1.9.tar.gz

IRC Services IRC Services 5.1.7

• IRC Services ircservices-5.1.9.tar.gz
  http://www.ircservices.za.net/download/ircservices-5.1.9.tar.gz

IRC Services IRC Services 5.1.8

• IRC Services ircservices-5.1.9.tar.gz
  http://www.ircservices.za.net/download/ircservices-5.1.9.tar.gz

IRC Services Password Parsing Remote Denial Of Service Vulnerability

References:

• IRC Services Change Log (IRC Services)
  
• IRC Services Homepage (IRC Services)