NVD

Id
40859  
Name
CVE-2013-5580  
Description
The (1) Conn_StartLogin and (2) cb_Read_Resolver_Result functions in conn.c in ngIRCd 18 through 20.2, when the configuration option NoticeAuth is enabled, does not properly handle the return code for the Handle_Write function, which allows remote attackers to cause a denial of service (assertion failure and server crash) via unspecified vectors, related to a "notice auth" message not being sent to a new client.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-18  
Published
2013-10-01  
Modified Date
2013-10-02  
Seq
2013-5580  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
206420 40859 CVE-2013-5580 http://arthur.barton.de/cgi-bin/gitweb.cgi?p=ngircd.git;a=commit;h=309122017ebc6fff039a7cab1b82f632853d82d5  View
206421 40859 CVE-2013-5580 [ngircd-ml] 20130823 ngIRCd 20.3  View
206422 40859 CVE-2013-5580 http://freecode.com/projects/ngircd/releases/357245  View
206423 40859 CVE-2013-5580 FEDORA-2013-15290  View
206424 40859 CVE-2013-5580 FEDORA-2013-15278  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
22886 JVNDB-2013-004461 ngIRCd の conn.c の Conn_StartLogin および cb_Read_Resolver_Result 関数におけるサービス運用妨害 (DoS) の脆弱性 ngIRCd の conn.c の (1) Conn_StartLogin および (2) cb_Read_Resolver_Result 関数は、NoticeAuth オプション設定が有効になっている場合、Handle_Write 関数用のリターンコードを適切に処理しないため、サービス運用妨害 (表明違反およびサーバクラッシュ) 状態にされる脆弱性が存在します。 CVE-2013-5580 65522 CVE-2013-5580 40859 4.3 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-004461.html 2013-08-23 2015-08-11 View