irc_server.c in dircproxy 1.2.0 and earlier allows remote attackers to cause a denial of service (segmentation fault) via an ACTION command without a parameter, which triggers a NULL pointer dereference, as demonstrated using a blank /me message from irssi.
References
Configurations
History
21 Nov 2024, 00:37
Type | Values Removed | Values Added |
---|---|---|
References | () http://dircproxy.securiweb.net/ticket/89 - | |
References | () https://bugzilla.redhat.com/show_bug.cgi?id=319301 - |
Information
Published : 2007-10-05 21:17
Updated : 2024-11-21 00:37
NVD link : CVE-2007-5226
Mitre link : CVE-2007-5226
CVE.ORG link : CVE-2007-5226
JSON object : View
Products Affected
dircproxy
- dircproxy
CWE
CWE-20
Improper Input Validation