NVD

Id
51769  
Name
CVE-2009-4652  
Description
The (1) Conn_GetCipherInfo and (2) Conn_UsesSSL functions in src/ngircd/conn.c in ngIRCd 13 and 14, when SSL/TLS support is present and standalone mode is disabled, allow remote attackers to cause a denial of service (application crash) by sending the MOTD command from another server in the same IRC network, possibly related to an array index error.  
Reject
 
CVSS Version
2  
CVSS Score
2.6  
Severity
Low  
CVSS Base Score
2.6  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
4.9  
CVSS Vector
(AV:N/AC:H/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-07  
Published
2010-02-26  
Modified Date
2010-03-02  
Seq
2009-4652  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
262249 51769 CVE-2009-4652 http://arthur.barton.de/cgi-bin/gitweb.cgi?p=ngircd.git;a=blobdiff;f=src/ngircd/conn.c;h=c6095a31c613bc5ca127d55b8723e15b836f1cca;hp=9752a6191c7e2da5b0df64779e9cc28ad1e6241c;hb=627b0b713c52406e50c84bb9459e7794262920a2;hpb=95428a72ffb5214826b61d5e77f860e7ef6a6c9e  View
262250 51769 CVE-2009-4652 http://arthur.barton.de/cgi-bin/gitweb.cgi?p=ngircd.git;a=commit;h=627b0b713c52406e50c84bb9459e7794262920a2  View
262251 51769 CVE-2009-4652 http://ngircd.barton.de/doc/ChangeLog  View
262252 51769 CVE-2009-4652 http://ngircd.barton.de/doc/NEWS  View
262253 51769 CVE-2009-4652 37021  View
262254 51769 CVE-2009-4652 ADV-2009-3240  View
262255 51769 CVE-2009-4652 ngircd-ssltls-dos(54272)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
38575 JVNDB-2010-004360 ngIRCd の Conn_GetCipherInfo 関数などにおけるサービス運用妨害 (DoS) の脆弱性 ngIRCd の src/ngircd/conn.c の (1) Conn_GetCipherInfo および (2) Conn_UsesSSL 関数には、SSL/TLS サポートが存在している、およびスタンドアロンモードが無効になっている際、配列インデックスエラーにより、サービス運用妨害 (アプリケーションクラッシュ) 状態となる脆弱性が存在します。 CVE-2009-4652 42083 CVE-2009-4652 51769 2.6 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-004360.html 2010-02-26 2012-09-25 View