CVE-2007-5226 Null dereference in n/a
Remote attackers can crash the dircproxy IRC server by sending an ACTION command without a parameter, causing a denial of service.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2007-5226?
CVE-2007-5226 is a medium-severity vulnerability in n/a, published on 5 Oct 2007. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
irc_server.c in dircproxy 1.2.0 and earlier allows remote attackers to cause a denial of service (segmentation fault) via an ACTION command without a parameter, which triggers a NULL pointer dereference, as demonstrated using a blank /me message from irssi.
Weakness: CWE-20
Which versions are affected by CVE-2007-5226?
It affects 1 product.
Products include Dircproxy Dircproxy.
How do I fix CVE-2007-5226?
Upgrade to a fixed version.
Is CVE-2007-5226 being exploited?
There is no known exploitation of CVE-2007-5226 in the wild and no public exploit code.
Sources
Also known as DEBIAN-CVE-2007-5226, GHSA-74j2-36vh-4f5f.