CVE-2009-4652 Denial of service in n/a
Remote attackers can crash the ngIRCd server by sending a specific MOTD command when SSL is enabled and standalone mode is off.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2009-4652?
CVE-2009-4652 is a low-severity denial of service vulnerability in n/a, published on 26 Feb 2010. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
The (1) Conn_GetCipherInfo and (2) Conn_UsesSSL functions in src/ngircd/conn.c in ngIRCd 13 and 14, when SSL/TLS support is present and standalone mode is disabled, allow remote attackers to cause a denial of service (application crash) by sending the MOTD command from another server in the same IRC network, possibly related to an array index error.
Which versions are affected by CVE-2009-4652?
It affects 1 product.
Products include Ngircd Ngircd.
How do I fix CVE-2009-4652?
Upgrade to a fixed version.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2009-4652 being exploited?
There is no known exploitation of CVE-2009-4652 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as DEBIAN-CVE-2009-4652, GHSA-73x9-fwrj-85f5.