NVD

Id
51169  
Name
CVE-2009-4016  
Description
Integer underflow in the clean_string function in irc_string.c in (1) IRCD-hybrid 7.2.2 and 7.2.3, (2) ircd-ratbox before 2.2.9, and (3) oftc-hybrid before 1.6.8, when flatten_links is disabled, allows remote attackers to execute arbitrary code or cause a denial of service (daemon crash) via a LINKS command.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2010-02-04  
Modified Date
2010-02-05  
Seq
2009-4016  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
259445 51169 CVE-2009-4016 [ircd-ratbox] 20100125 ircd-ratbox-2.2.9 released  View
259446 51169 CVE-2009-4016 http://security.debian.org/pool/updates/main/i/ircd-hybrid/ircd-hybrid_7.2.2.dfsg.2-4+lenny1.diff.gz  View
259447 51169 CVE-2009-4016 http://svn.ircd-hybrid.org:8000/viewcvs.cgi?rev=1044&view=rev  View
259448 51169 CVE-2009-4016 http://trac.oftc.net/projects/oftc-hybrid/browser/tags/oftc-hybrid-1.6.8/RELNOTES  View
259449 51169 CVE-2009-4016 DSA-1980  View
259450 51169 CVE-2009-4016 37978  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
38534 JVNDB-2010-004319 RCD-hybrid などの clean_string 関数におけるサービス運用妨害 (DoS) の脆弱性 (1) IRCD-hybrid、(2) ircd-ratbox および (3) oftc-hybrid の clean_string 関数は、flatten_links が無効になっている際、整数アンダーフローが発生するため、任意のコードを実行される、またはサービス運用妨害 (デーモンクラッシュ) 状態となる脆弱性が存在します。 CVE-2009-4016 41447 CVE-2009-4016 51169 6.8 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-004319.html 2010-02-04 2012-09-25 View