Secunia

A vulnerability has been reported in Bahamut and derived IRC daemons, which can be exploited by malicious people to cause a DoS (Denial of Service) on a vulnerable IRC server and potentially compromise it.

The vulnerability is caused due to a format string error when the IRC daemon is running in debug mode (has been compiled with "DEBUGMODE"). This can be exploited by connecting to the server and sending a specially crafted string containing format specifiers.

The vulnerability has been reported in the following products:
- Bahamut 1.4.35
- Digatech 1.2.1
- Methane 0.1.1
- Andromede 1.2.3-Release
- ircd-RU! 1.0.6-03-stable and prior.

Solution
Don't run the IRC daemon in DEBUGMODE.
Further details available in Customer Area

Provided and/or discovered by
Anonymous (0xbadc0ded.org) and Joel Eriksson (bitnux.com).

Original Advisory
http://www.0xbadc0ded.org/advisories/0301.txt

Deep Links
Links available in Customer Area