Published: 02/05/2005 Updated: 08/02/2024

CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10

CVSS v3 Base Score: 9.8 | Impact Score: 5.9 | Exploitability Score: 3.9

VMScore: 755

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Integer underflow in the Lists_MakeMask() function in lists.c in ngIRCd prior to 0.8.2 allows remote malicious users to cause a denial of service (application crash) and possibly execute arbitrary code via a long MODE line that causes an incorrect length calculation, which leads to a buffer overflow.

Vulnerable Product	Search on Vulmon	Subscribe to Product
barton ngircd

source: wwwsecurityfocuscom/bid/12397/info ngIRCd is reported prone to a remote buffer overflow vulnerability This issue presents itself because the application fails to perform proper boundary checks before copying user-supplied data into process buffers A successful attack may allow the attacker to crash the server or gain unauthoriz ...

CWE-191 http://arthur.ath.cx/pipermail/ngircd-ml/2005-January/000228.html http://bugs.gentoo.org/show_bug.cgi?id=79705 http://www.gentoo.org/security/en/glsa/glsa-200501-40.xml http://www.securityfocus.com/bid/12397 http://securitytracker.com/id?1013047 http://secunia.com/advisories/14056 http://secunia.com/advisories/14059 https://exchange.xforce.ibmcloud.com/vulnerabilities/19143 https://nvd.nist.gov https://www.exploit-db.com/exploits/25070/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2005-0199

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect