Published: 08/06/2009 Updated: 17/08/2017

CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10

VMScore: 505

Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P

Off-by-one error in the event_wallops function in fe-common/irc/fe-events.c in irssi 0.8.13 allows remote IRC servers to cause a denial of service (crash) via an empty command, which triggers a one-byte buffer under-read and a one-byte buffer underflow.

Vulnerable Product	Search on Vulmon	Subscribe to Product
irssi irssi 0.8.13

It was discovered that irssi did not properly check the length of strings when processing WALLOPS messages If a user connected to an IRC network where an attacker had IRC operator privileges, a remote attacker could cause a denial of service ...

Debian Bug report logs - #531357 irssi WALLOPS heap off-by-one Package: irssi; Maintainer for irssi is Rhonda D'Vine <rhonda@debianorg>; Source for irssi is src:irssi (PTS, buildd, popcon) Reported by: Craig <craig@haquarterde> Date: Sun, 31 May 2009 21:42:02 UTC Severity: important Tags: security Merged with 5326 ...

source: wwwsecurityfocuscom/bid/35399/info Irssi is prone to an off-by-one, heap-based, memory-corruption vulnerability because it fails to properly bounds-check user-supplied data before copying it into a memory buffer Attackers can exploit this issue to crash the vulnerable client, resulting in a denial-of-service condition Given the ...

CWE-189 http://bugs.irssi.org/index.php?do=details&task_id=662 http://xorl.wordpress.com/2009/05/28/irssi-event_wallops-off-by-one-readwrite/http://www.irssi.org/ChangeLog http://www.openwall.com/lists/oss-security/2009/05/29/3 http://www.mandriva.com/security/advisories?name=MDVSA-2009:133 http://www.securitytracker.com/id?1022410 http://www.vupen.com/english/advisories/2009/1596 http://www.securityfocus.com/bid/35399 http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html http://www.ubuntu.com/usn/usn-800-1 http://secunia.com/advisories/35812 http://secunia.com/advisories/35685 http://secunia.com/advisories/36152 https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00146.html https://exchange.xforce.ibmcloud.com/vulnerabilities/51184 https://usn.ubuntu.com/800-1/https://nvd.nist.gov https://www.exploit-db.com/exploits/33041/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2009-1959

Vulnerability Summary

Vendor Advisories

Exploits

References

Vulmon Search

About

Products

Connect