Smart IRC Daemon Remote Client DNS Buffer Overflow Vulnerability

Bugtraq ID:	6924
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	Feb 24 2003 12:00AM
Updated:	Feb 24 2003 12:00AM
Credit:	Discovery credited to Knud Erik Højgaard.
Vulnerable:	sircd sircd 0.4 .0
Not Vulnerable:

Smart IRC Daemon Remote Client DNS Buffer Overflow Vulnerability

It has been reported that sircd is vulnerable to a boundary condition error. Under certain circumstances, a client with malicious DNS information may be able to cause a stack-based overflow in the IRC server. This could lead to denial of service, and potentially code execution.

Smart IRC Daemon Remote Client DNS Buffer Overflow Vulnerability

Proof-of-concept contributed by Knud Erik Højgaard:

• /data/vulnerabilities/exploits/sircd.sh

Smart IRC Daemon Remote Client DNS Buffer Overflow Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Smart IRC Daemon Remote Client DNS Buffer Overflow Vulnerability

References:

• sircd (sircd)
  
• sircd proof-of-concept / advisory (Knud Erik Højgaard )