BNLug - IRCD RatBox Pending Connections Denial Of Service Vulnerability

IRCD RatBox Pending Connections Denial Of Service Vulnerability

TITLE: IRCD RatBox Pending Connections Denial Of Service Vulnerability
CLASS: Failure to Handle Exceptional Conditions
CVE:
REMOTE: Yes
LOCAL: No
PUBLISHED: May 18 2007 12:00AM
UPDATE: May 18 2007 07:48PM
CREDIT: The vendor disclosed this issue.
VULNERABLE:

OpenPKG OpenPKG E1.0-Solid
OpenPKG OpenPKG Current
ircd-ratbox ircd-ratbox 2.2.5
ircd-ratbox ircd-ratbox 2.0 rc7
ircd-ratbox ircd-ratbox 2.0 rc6
ircd-ratbox ircd-ratbox 1.5.2
ircd-ratbox ircd-ratbox 1.5.1

NOT VULNERABLE:

ircd-ratbox ircd-ratbox 2.2.6

Vai alla pagina originale su Security Focus

Discussion

The 'ircd-ratbox' program is prone to a denial-of-service vulnerability.

Attackers can exploit this issue to deny service to legitimate users.

Versions of ircd-ratbox prior to 2.2.6 are vulnerable.

Exploit

An attacker can exploit this issue using readily available packet-crafting utilities.

Solution

Solution:
The vendor has released version 2.2.6 to address this issue. Please see the references for more information.

OpenPKG OpenPKG E1.0-Solid