Anope Services OperServ Raw Join Denial Of Service Vulnerability

Bugtraq ID:	8130
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	Yes
Local:	No
Published:	Jul 08 2003 12:00AM
Updated:	Jul 08 2003 12:00AM
Credit:	Discovery of this issue is credited to Lethalman <[email protected]>.
Vulnerable:	Anope IRC Services Anope Services 1.4.25 Anope IRC Services Anope Services 1.4.20 Anope IRC Services Anope Services 1.4.19 Anope IRC Services Anope Services 1.4.18 Anope IRC Services Anope Services 1.4.17 Anope IRC Services Anope Services 1.4.16 Anope IRC Services Anope Services 1.4.15
Not Vulnerable:

Anope Services OperServ Raw Join Denial Of Service Vulnerability

It is reported Anope Services may crash under some circumstances when a client sends a raw message to operserv. This may occur when a raw message is used when requesting to join a channel. Exploitation could result in a denial of service.

It should be noted that other IRC daemon implementations may be similarly affected, especially in cases where raw message code is shared with other implementations or derived from the same source.

Anope Services OperServ Raw Join Denial Of Service Vulnerability

This issue can be exploited with an IRC client.

Anope Services OperServ Raw Join Denial Of Service Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Anope Services OperServ Raw Join Denial Of Service Vulnerability

References:

• Anope Services Homepage (Anope IRC Services)