CVEvulnerability
CVE-2010-0303
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2010-02-04
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:N/A:P
- Weaknesses
- CWE-20
Description
mystring.c in hybserv in IRCD-Hybrid (aka Hybrid2 IRC Services) 1.9.2 through 1.9.4 allows remote attackers to cause a denial of service (daemon crash) via a ":help \t" private message to the MemoServ service.
Affected configurations
• dinko korunic hybserv2 1.9.2
• dinko korunic hybserv2 1.9.3
• dinko korunic hybserv2 1.9.4
Related
Weakness · CWE (1)
- CWE-20 Improper Input Validation weakness
References
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=550389 bugs.debian.org
- http://marc.info/?l=oss-security&m=126476591925300&w=2 marc.info
- http://secunia.com/advisories/38350 Vendor Advisory
- http://secunia.com/advisories/38352 Vendor Advisory
- http://security.debian.org/pool/updates/main/h/hybserv/hybserv_1.9.2-4+lenny2.diff.gz Patch
- http://www.debian.org/security/2010/dsa-1982 www.debian.org
- http://www.securityfocus.com/bid/38006 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/55992 exchange.xforce.ibmcloud.com
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=550389 bugs.debian.org
- http://marc.info/?l=oss-security&m=126476591925300&w=2 marc.info
- http://secunia.com/advisories/38350 Vendor Advisory
- http://secunia.com/advisories/38352 Vendor Advisory
- http://security.debian.org/pool/updates/main/h/hybserv/hybserv_1.9.2-4+lenny2.diff.gz Patch
- http://www.debian.org/security/2010/dsa-1982 www.debian.org
- http://www.securityfocus.com/bid/38006 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/55992 exchange.xforce.ibmcloud.com