Bahamut IRCd Remote Format String Vulnerability

BID:8038

Info

Bahamut IRCd Remote Format String Vulnerability

Bugtraq ID: 8038
Class: Input Validation Error
CVE:
Remote: Yes
Local: No
Published: Jun 26 2003 12:00AM
Updated: Jun 26 2003 12:00AM
Credit: Discovery of this vulnerability has been credited to an anonymous 0xbadc0ded.org affiliate.
Vulnerable: methane methane IRCd 0.1.1
ircd-RU! ircd-RU! 1.0.6 -release
ircd-RU! ircd-RU! 1.0.6 -03-stable
ircd-RU! ircd-RU! 1.0.6 -02-stable
ircd-RU! ircd-RU! 1.0.6 -01-stable
digatech digatech IRCd 1.2.1
DALnet Bahamut IRCd 1.4.35
andromede.net AndromedeIRCd 1.2.3 -Release
Not Vulnerable: ircd-RU! ircd-RU! 1.0.6 -04-stable

Discussion

Bahamut IRCd Remote Format String Vulnerability

Behamut IRCd has been reported prone to remotely exploitable format string vulnerability.

The issue presents itself when Behamut is compiled with DEBUGMODE defined. Reportedly a remote attacker may send malicious format specifiers to trigger an error. By passing specially crafted format specifiers through the IRC session, a remote attacker could potentially corrupt process memory and may have the ability to execute arbitrary code with the privileges of the affected daemon.

It should be noted that IRC daemons that are derived from the Behamut source have also been reported vulnerable.

Exploit / POC

Bahamut IRCd Remote Format String Vulnerability

The following proof of concept has been supplied by [email protected]:

Solution / Fix

Bahamut IRCd Remote Format String Vulnerability

Solution:
The following fixes are available:


ircd-RU! ircd-RU! 1.0.6 -03-stable

ircd-RU! ircd-RU! 1.0.6 -01-stable

ircd-RU! ircd-RU! 1.0.6 -release

ircd-RU! ircd-RU! 1.0.6 -02-stable

References

© CVE.report 2026

Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.

CVE, CWE, and OVAL are registred trademarks of The MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. This site includes MITRE data granted under the following license.

Free CVE JSON API cve.report/api

CVE.report and Source URL Uptime Status status.cve.report