WeeChat IRC Message Remote Denial Of Service Vulnerability

Bugtraq ID:	34148
Class:	Design Error
CVE:	CVE-2009-0661
Remote:	Yes
Local:	No
Published:	Mar 17 2009 12:00AM
Updated:	Apr 13 2015 10:11PM
Credit:	Reported by the vendor
Vulnerable:	Gentoo Linux FlashTux WeeChat 0.2.6 0 Debian Linux 5.0 sparc Debian Linux 5.0 s/390 Debian Linux 5.0 powerpc Debian Linux 5.0 mipsel Debian Linux 5.0 mips Debian Linux 5.0 m68k Debian Linux 5.0 ia-64 Debian Linux 5.0 ia-32 Debian Linux 5.0 hppa Debian Linux 5.0 armel Debian Linux 5.0 arm Debian Linux 5.0 amd64 Debian Linux 5.0 alpha Debian Linux 5.0
Not Vulnerable:	FlashTux WeeChat 0.2.6.1

WeeChat IRC Message Remote Denial Of Service Vulnerability

WeeChat is prone to a remote denial-of-service vulnerability.

An attacker may exploit this issue crash the application, resulting in a denial-of-service condition.

Versions prior to WeeChat 0.2.6.1 are vulnerable.

WeeChat IRC Message Remote Denial Of Service Vulnerability

An attacker can use readily available network utilities to exploit this issue.

WeeChat IRC Message Remote Denial Of Service Vulnerability

Solution:
The vendor released an update to address this issue. Please see the references for more information.


Debian Linux 5.0 hppa

• Debian weechat-common_0.2.6-1+lenny1_all.deb
  http://security.debian.org/pool/updates/main/w/weechat/weechat-common_ 0.2.6-1+lenny1_all.deb


• Debian weechat-curses_0.2.6-1+lenny1_hppa.deb
  http://security.debian.org/pool/updates/main/w/weechat/weechat-curses_ 0.2.6-1+lenny1_hppa.deb


• Debian weechat-plugins_0.2.6-1+lenny1_hppa.deb
  http://security.debian.org/pool/updates/main/w/weechat/weechat-plugins _0.2.6-1+lenny1_hppa.deb


• Debian weechat_0.2.6-1+lenny1_all.deb
  http://security.debian.org/pool/updates/main/w/weechat/weechat_0.2.6-1 +lenny1_all.deb

Debian Linux 5.0 ia-64

• Debian weechat-common_0.2.6-1+lenny1_all.deb
  http://security.debian.org/pool/updates/main/w/weechat/weechat-common_ 0.2.6-1+lenny1_all.deb


• Debian weechat-curses_0.2.6-1+lenny1_ia64.deb
  http://security.debian.org/pool/updates/main/w/weechat/weechat-curses_ 0.2.6-1+lenny1_ia64.deb


• Debian weechat-plugins_0.2.6-1+lenny1_ia64.deb
  http://security.debian.org/pool/updates/main/w/weechat/weechat-plugins _0.2.6-1+lenny1_ia64.deb


• Debian weechat_0.2.6-1+lenny1_all.deb
  http://security.debian.org/pool/updates/main/w/weechat/weechat_0.2.6-1 +lenny1_all.deb

Debian Linux 5.0 m68k

• Debian weechat-common_0.2.6-1+lenny1_all.deb
  http://security.debian.org/pool/updates/main/w/weechat/weechat-common_ 0.2.6-1+lenny1_all.deb


• Debian weechat_0.2.6-1+lenny1_all.deb
  http://security.debian.org/pool/updates/main/w/weechat/weechat_0.2.6-1 +lenny1_all.deb

Debian Linux 5.0 arm

• Debian weechat-common_0.2.6-1+lenny1_all.deb
  http://security.debian.org/pool/updates/main/w/weechat/weechat-common_ 0.2.6-1+lenny1_all.deb


• Debian weechat-curses_0.2.6-1+lenny1_arm.deb
  http://security.debian.org/pool/updates/main/w/weechat/weechat-curses_ 0.2.6-1+lenny1_arm.deb


• Debian weechat-plugins_0.2.6-1+lenny1_arm.deb
  http://security.debian.org/pool/updates/main/w/weechat/weechat-plugins _0.2.6-1+lenny1_arm.deb


• Debian weechat_0.2.6-1+lenny1_all.deb
  http://security.debian.org/pool/updates/main/w/weechat/weechat_0.2.6-1 +lenny1_all.deb

Debian Linux 5.0 armel

• Debian weechat-common_0.2.6-1+lenny1_all.deb
  http://security.debian.org/pool/updates/main/w/weechat/weechat-common_ 0.2.6-1+lenny1_all.deb


• Debian weechat-curses_0.2.6-1+lenny1_armel.deb
  http://security.debian.org/pool/updates/main/w/weechat/weechat-curses_ 0.2.6-1+lenny1_armel.deb


• Debian weechat-plugins_0.2.6-1+lenny1_armel.deb
  http://security.debian.org/pool/updates/main/w/weechat/weechat-plugins _0.2.6-1+lenny1_armel.deb


• Debian weechat_0.2.6-1+lenny1_all.deb
  http://security.debian.org/pool/updates/main/w/weechat/weechat_0.2.6-1 +lenny1_all.deb

Debian Linux 5.0

• Debian weechat-common_0.2.6-1+lenny1_all.deb
  http://security.debian.org/pool/updates/main/w/weechat/weechat-common_ 0.2.6-1+lenny1_all.deb


• Debian weechat_0.2.6-1+lenny1_all.deb
  http://security.debian.org/pool/updates/main/w/weechat/weechat_0.2.6-1 +lenny1_all.deb

Debian Linux 5.0 amd64

• Debian weechat-common_0.2.6-1+lenny1_all.deb
  http://security.debian.org/pool/updates/main/w/weechat/weechat-common_ 0.2.6-1+lenny1_all.deb


• Debian weechat-curses_0.2.6-1+lenny1_amd64.deb
  http://security.debian.org/pool/updates/main/w/weechat/weechat-curses_ 0.2.6-1+lenny1_amd64.deb


• Debian weechat-plugins_0.2.6-1+lenny1_amd64.deb
  http://security.debian.org/pool/updates/main/w/weechat/weechat-plugins _0.2.6-1+lenny1_amd64.deb


• Debian weechat_0.2.6-1+lenny1_all.deb
  http://security.debian.org/pool/updates/main/w/weechat/weechat_0.2.6-1 +lenny1_all.deb

Debian Linux 5.0 alpha

• Debian weechat-common_0.2.6-1+lenny1_all.deb
  http://security.debian.org/pool/updates/main/w/weechat/weechat-common_ 0.2.6-1+lenny1_all.deb


• Debian weechat_0.2.6-1+lenny1_all.deb
  http://security.debian.org/pool/updates/main/w/weechat/weechat_0.2.6-1 +lenny1_all.deb

Debian Linux 5.0 ia-32

• Debian weechat-common_0.2.6-1+lenny1_all.deb
  http://security.debian.org/pool/updates/main/w/weechat/weechat-common_ 0.2.6-1+lenny1_all.deb


• Debian weechat-curses_0.2.6-1+lenny1_i386.deb
  http://security.debian.org/pool/updates/main/w/weechat/weechat-curses_ 0.2.6-1+lenny1_i386.deb


• Debian weechat-plugins_0.2.6-1+lenny1_i386.deb
  http://security.debian.org/pool/updates/main/w/weechat/weechat-plugins _0.2.6-1+lenny1_i386.deb


• Debian weechat_0.2.6-1+lenny1_all.deb
  http://security.debian.org/pool/updates/main/w/weechat/weechat_0.2.6-1 +lenny1_all.deb

Debian Linux 5.0 mips

• Debian weechat-common_0.2.6-1+lenny1_all.deb
  http://security.debian.org/pool/updates/main/w/weechat/weechat-common_ 0.2.6-1+lenny1_all.deb


• Debian weechat-curses_0.2.6-1+lenny1_mips.deb
  http://security.debian.org/pool/updates/main/w/weechat/weechat-curses_ 0.2.6-1+lenny1_mips.deb


• Debian weechat-plugins_0.2.6-1+lenny1_mips.deb
  http://security.debian.org/pool/updates/main/w/weechat/weechat-plugins _0.2.6-1+lenny1_mips.deb


• Debian weechat_0.2.6-1+lenny1_all.deb
  http://security.debian.org/pool/updates/main/w/weechat/weechat_0.2.6-1 +lenny1_all.deb

Debian Linux 5.0 s/390

• Debian weechat-common_0.2.6-1+lenny1_all.deb
  http://security.debian.org/pool/updates/main/w/weechat/weechat-common_ 0.2.6-1+lenny1_all.deb


• Debian weechat-curses_0.2.6-1+lenny1_s390.deb
  http://security.debian.org/pool/updates/main/w/weechat/weechat-curses_ 0.2.6-1+lenny1_s390.deb


• Debian weechat-plugins_0.2.6-1+lenny1_s390.deb
  http://security.debian.org/pool/updates/main/w/weechat/weechat-plugins _0.2.6-1+lenny1_s390.deb


• Debian weechat_0.2.6-1+lenny1_all.deb
  http://security.debian.org/pool/updates/main/w/weechat/weechat_0.2.6-1 +lenny1_all.deb

Debian Linux 5.0 mipsel

• Debian weechat-common_0.2.6-1+lenny1_all.deb
  http://security.debian.org/pool/updates/main/w/weechat/weechat-common_ 0.2.6-1+lenny1_all.deb


• Debian weechat-curses_0.2.6-1+lenny1_mipsel.deb
  http://security.debian.org/pool/updates/main/w/weechat/weechat-curses_ 0.2.6-1+lenny1_mipsel.deb


• Debian weechat-plugins_0.2.6-1+lenny1_mipsel.deb
  http://security.debian.org/pool/updates/main/w/weechat/weechat-plugins _0.2.6-1+lenny1_mipsel.deb


• Debian weechat_0.2.6-1+lenny1_all.deb
  http://security.debian.org/pool/updates/main/w/weechat/weechat_0.2.6-1 +lenny1_all.deb

Debian Linux 5.0 powerpc

• Debian weechat-common_0.2.6-1+lenny1_all.deb
  http://security.debian.org/pool/updates/main/w/weechat/weechat-common_ 0.2.6-1+lenny1_all.deb


• Debian weechat-curses_0.2.6-1+lenny1_powerpc.deb
  http://security.debian.org/pool/updates/main/w/weechat/weechat-curses_ 0.2.6-1+lenny1_powerpc.deb


• Debian weechat-plugins_0.2.6-1+lenny1_powerpc.deb
  http://security.debian.org/pool/updates/main/w/weechat/weechat-plugins _0.2.6-1+lenny1_powerpc.deb


• Debian weechat_0.2.6-1+lenny1_all.deb
  http://security.debian.org/pool/updates/main/w/weechat/weechat_0.2.6-1 +lenny1_all.deb

Debian Linux 5.0 sparc

• Debian weechat-common_0.2.6-1+lenny1_all.deb
  http://security.debian.org/pool/updates/main/w/weechat/weechat-common_ 0.2.6-1+lenny1_all.deb


• Debian weechat-curses_0.2.6-1+lenny1_sparc.deb
  http://security.debian.org/pool/updates/main/w/weechat/weechat-curses_ 0.2.6-1+lenny1_sparc.deb


• Debian weechat-plugins_0.2.6-1+lenny1_sparc.deb
  http://security.debian.org/pool/updates/main/w/weechat/weechat-plugins _0.2.6-1+lenny1_sparc.deb


• Debian weechat_0.2.6-1+lenny1_all.deb
  http://security.debian.org/pool/updates/main/w/weechat/weechat_0.2.6-1 +lenny1_all.deb

WeeChat IRC Message Remote Denial Of Service Vulnerability

References:

• Vendor Homepage (Flashtux)
  
• WeeChat 0.2.6.1 Released (WeeChat)
  
• weechat-curses: DoS (crash) with some IRC messages from other users (Sebastien Helleu )