UnrealIRCD OperServ Raw Join Denial Of Service Vulnerability

Bugtraq ID:	8131
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	Yes
Local:	No
Published:	Jul 08 2003 12:00AM
Updated:	Jul 08 2003 12:00AM
Credit:	Discovery of this issue is credited to Lethalman <[email protected]>.
Vulnerable:	Unreal UnrealIRCd 3.2 .0 beta 10 Unreal UnrealIRCd 3.1.3 Unreal UnrealIRCd 3.1.1
Not Vulnerable:

UnrealIRCD OperServ Raw Join Denial Of Service Vulnerability

It is reported UnrealIRCD may crash when a client sends a raw message to operserv. This may occur when a raw message is sent to a non-existent nick or a raw message is used when requesting to join a channel. Exploitation could result in a denial of service.

It should be noted that other IRC daemon implementations may be similarly affected, especially in cases where raw message code is shared with other implementations or derived from the same source.

UnrealIRCD OperServ Raw Join Denial Of Service Vulnerability

This issue may be exploited with an IRC client.

UnrealIRCD OperServ Raw Join Denial Of Service Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

UnrealIRCD OperServ Raw Join Denial Of Service Vulnerability

References:

• UnrealIRCd Homepage (Unreal)