CVEvulnerability
CVE-2009-4016
6.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2010-02-04
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-189
Description
Integer underflow in the clean_string function in irc_string.c in (1) IRCD-hybrid 7.2.2 and 7.2.3, (2) ircd-ratbox before 2.2.9, and (3) oftc-hybrid before 1.6.8, when flatten_links is disabled, allows remote attackers to execute arbitrary code or cause a denial of service (daemon crash) via a LINKS command.
Affected configurations
• ircd-hybrid ircd-hybrid 7.2.2
• ircd-hybrid ircd-hybrid 7.2.3
• ircd-ratbox ircd-ratbox (<= 2.2.8)
• ircd-ratbox ircd-ratbox 1.0
• ircd-ratbox ircd-ratbox 1.1
• ircd-ratbox ircd-ratbox 1.1.1
• ircd-ratbox ircd-ratbox 1.1.2
• ircd-ratbox ircd-ratbox 1.2.1
• ircd-ratbox ircd-ratbox 1.2.2
• ircd-ratbox ircd-ratbox 1.2.3
• ircd-ratbox ircd-ratbox 1.3
• ircd-ratbox ircd-ratbox 1.3.1
• ircd-ratbox ircd-ratbox 1.3.2
• ircd-ratbox ircd-ratbox 1.4
• ircd-ratbox ircd-ratbox 1.4.1
• ircd-ratbox ircd-ratbox 1.4.2
• ircd-ratbox ircd-ratbox 1.5
• ircd-ratbox ircd-ratbox 1.5.1
• ircd-ratbox ircd-ratbox 1.5.2
• ircd-ratbox ircd-ratbox 1.5.3
• ircd-ratbox ircd-ratbox 2.0.0
• ircd-ratbox ircd-ratbox 2.0.1
• ircd-ratbox ircd-ratbox 2.0.2
• ircd-ratbox ircd-ratbox 2.0.3
• ircd-ratbox ircd-ratbox 2.0.4
• ircd-ratbox ircd-ratbox 2.0.5
• ircd-ratbox ircd-ratbox 2.0.6
• ircd-ratbox ircd-ratbox 2.0.7
• ircd-ratbox ircd-ratbox 2.0.8
• ircd-ratbox ircd-ratbox 2.0.9
• ircd-ratbox ircd-ratbox 2.0.10
• ircd-ratbox ircd-ratbox 2.0.11
• ircd-ratbox ircd-ratbox 2.1.0
• ircd-ratbox ircd-ratbox 2.1.1
• ircd-ratbox ircd-ratbox 2.1.2
• ircd-ratbox ircd-ratbox 2.1.3
• ircd-ratbox ircd-ratbox 2.1.4
• ircd-ratbox ircd-ratbox 2.1.5
• ircd-ratbox ircd-ratbox 2.1.6
• ircd-ratbox ircd-ratbox 2.1.7
• ircd-ratbox ircd-ratbox 2.1.8
• ircd-ratbox ircd-ratbox 2.2.0
• ircd-ratbox ircd-ratbox 2.2.1
• ircd-ratbox ircd-ratbox 2.2.2
• ircd-ratbox ircd-ratbox 2.2.3
• ircd-ratbox ircd-ratbox 2.2.4
• ircd-ratbox ircd-ratbox 2.2.5
• ircd-ratbox ircd-ratbox 2.2.6
• ircd-ratbox ircd-ratbox 2.2.7
• oftc oftc-hybrid (<= 1.6.7)
• oftc oftc-hybrid 1.4.0
• oftc oftc-hybrid 1.4.1
• oftc oftc-hybrid 1.5.0
• oftc oftc-hybrid 1.5.1
• oftc oftc-hybrid 1.5.2
• oftc oftc-hybrid 1.5.3
• oftc oftc-hybrid 1.5.4
• oftc oftc-hybrid 1.5.5
• oftc oftc-hybrid 1.5.6
• oftc oftc-hybrid 1.5.7
… and 7 more
Related
Weakness · not in database (1)
References
- http://lists.ratbox.org/pipermail/ircd-ratbox/2010-January/000891.html lists.ratbox.org
- http://secunia.com/advisories/38210 Vendor Advisory
- http://secunia.com/advisories/38381 Vendor Advisory
- http://secunia.com/advisories/38382 Vendor Advisory
- http://secunia.com/advisories/38383 Vendor Advisory
- http://security.debian.org/pool/updates/main/i/ircd-hybrid/ircd-hybrid_7.2.2.dfsg.2-4+lenny1.diff.gz Patch
- http://svn.ircd-hybrid.org:8000/viewcvs.cgi?rev=1044&view=rev svn.ircd-hybrid.org:8000
- http://trac.oftc.net/projects/oftc-hybrid/browser/tags/oftc-hybrid-1.6.8/RELNOTES trac.oftc.net
- http://www.debian.org/security/2010/dsa-1980 Patch
- http://www.securityfocus.com/bid/37978 www.securityfocus.com
- http://lists.ratbox.org/pipermail/ircd-ratbox/2010-January/000891.html lists.ratbox.org
- http://secunia.com/advisories/38210 Vendor Advisory
- http://secunia.com/advisories/38381 Vendor Advisory
- http://secunia.com/advisories/38382 Vendor Advisory
- http://secunia.com/advisories/38383 Vendor Advisory
- http://security.debian.org/pool/updates/main/i/ircd-hybrid/ircd-hybrid_7.2.2.dfsg.2-4+lenny1.diff.gz Patch
- http://svn.ircd-hybrid.org:8000/viewcvs.cgi?rev=1044&view=rev svn.ircd-hybrid.org:8000
- http://trac.oftc.net/projects/oftc-hybrid/browser/tags/oftc-hybrid-1.6.8/RELNOTES trac.oftc.net
- http://www.debian.org/security/2010/dsa-1980 Patch
- http://www.securityfocus.com/bid/37978 www.securityfocus.com