Ubuntu irssi DCC ACCEPT Parameter Handling Denial of Service - Secunia Advisories - Vulnerability Intelligence

Home > Vulnerability Intelligence > Secunia Advisories > Ubuntu irssi DCC ACCEPT Parameter Handling Denial of Service

Secunia Advisories

Advisories

Advisories by Product

Business Solutions Restricted

Partner Solutions Restricted

About

Ubuntu irssi DCC ACCEPT Parameter Handling Denial of Service
Secunia Advisory:	SA19090	Advisory Toolbox: Issue ticket Save in to-do list Mark as handled Exploit information Download as PDF Review actions Add comment
Release Date:	2006-03-02
Popularity:	9,000 views

Critical:	Less critical
Impact:	DoS
Where:	From remote
Solution Status:	Vendor Patch

OS:	Ubuntu Linux 5.10

Subscribe:	Instant alerts on relevant vulnerabilities

CVE reference:	CVE-2006-0458

Description: Scott Sinclair has reported a vulnerability in irssi, which can be exploited by malicious people to cause a DoS (Denial of Service). The vulnerability is caused due to an error in the "dcc_ctcp_resume_parse()" function in "dcc-resume.c". This can be exploited to crash a vulnerable client by sending a specially crafted DCC ACCEPT message with too few parameters. Solution: Apply updated packages. -- Ubuntu 5.10 (Breezy Badger) -- Source archives: http://security.ubuntu.com/ubuntu/poo...xt_0.8.9+0.8.10rc5-0ubuntu4.1.diff.gz Size/MD5: 12568 50ec4fee5eaf55ba7a312373bbaca462 http://security.ubuntu.com/ubuntu/poo...i-text_0.8.9+0.8.10rc5-0ubuntu4.1.dsc Size/MD5: 739 23ccac99b2a8f82d47cb1cc5f9a51ac8 http://security.ubuntu.com/ubuntu/poo...rssi-text_0.8.9+0.8.10rc5.orig.tar.gz Size/MD5: 1192158 7c0b6c1533c85e918f41ded1238e4ca1 amd64 architecture (Athlon64, Opteron, EM64T Xeon) http://security.ubuntu.com/ubuntu/poo..._0.8.9+0.8.10rc5-0ubuntu4.1_amd64.deb Size/MD5: 955832 134ebeda2593d742a808a79b78a9f488 i386 architecture (x86 compatible Intel/AMD) http://security.ubuntu.com/ubuntu/poo...t_0.8.9+0.8.10rc5-0ubuntu4.1_i386.deb Size/MD5: 851690 854b0e9e9ff3a73160a71d1b5445d850 powerpc architecture (Apple Macintosh G3/G4/G5) http://security.ubuntu.com/ubuntu/poo....8.9+0.8.10rc5-0ubuntu4.1_powerpc.deb Size/MD5: 937644 73f7b5547d9905e95006889dbc92082b Provided and/or discovered by: Reported by Scott Sinclair. Original Advisory: http://www.ubuntu.com/usn/usn-259-1

Track this Secunia Advisory
Customers of the Secunia Vulnerability Intelligence solutions will automatically receive updates when new information regarding this advisory is released. Read more about our Vulnerability Intelligence solutions and what they can do for you and your company.

About this Secunia Advisory
Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise. Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.

Latest Advisories

Today

New advisories:	31
New vulnerabilities:	90
Updated advisories:	37

Less // 389 views

Joomla! "X_CMS_LIBRARY_PATH" Directory Traversal Vulnerability

Moderately // 229 views

Red Hat update for xterm

Not // 210 views

Red Hat update for dbus

Moderately // 298 views

Red Hat update for openssl

Moderately // 448 views

OpenSSL DSA / ECDSA "EVP_VerifyFinal()" Spoofing Vulnerability

Less // 227 views

vBulletin Personal Sticky Threads Add-on Security Bypass Vulnerability

Moderately // 200 views

BlogHelper "common_db.inc" Information Disclosure Security Issue

Moderately // 194 views

PollHelper "poll.inc" Information Disclosure Security Issue

Highly // 268 views

ComponentOne SizerOne CTab ActiveX Control Caption List Buffer Overflow

Highly // 244 views

TSC2 Help Desk CTab ActiveX Control Caption List Buffer Overflow

Solutions | More...

Send Feedback to Secunia
If you have new information regarding this Secunia advisory or a product in our database, please send it to us using either our web form or email us at vuln@secunia.com. Ideas, suggestions, and other feedback are most welcome.