10
CVSSv2

CVE-2003-0478

Published: 07/08/2003 Updated: 18/10/2016
CVSS v2 Base Score: 10 | Impact Score: 10 | Exploitability Score: 10
VMScore: 1000
Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C

Vulnerability Summary

Format string vulnerability in (1) Bahamut IRCd 1.4.35 and previous versions, and other IRC daemons based on Bahamut including (2) digatech 1.2.1, (3) methane 0.1.1, (4) AndromedeIRCd 1.2.3-Release, and (5) ircd-RU, when running in debug mode, allows remote malicious users to cause a denial of service and possibly execute arbitrary code via a request containing format strings.

Vulnerable Product Search on Vulmon Subscribe to Product

hans westerhof digatech 1.2.1

wenet ircd-ru

andromede adromedeircd 1.2.3

daniel moss methane 0.1.1

bahamut ircd

Exploits

source: wwwsecurityfocuscom/bid/8038/info Behamut IRCd has been reported prone to remotely exploitable format string vulnerability The issue presents itself when Behamut is compiled with DEBUGMODE defined Reportedly a remote attacker may send malicious format specifiers to trigger an error By passing specially crafted format specifier ...