Executive Summary



This Alert is flagged as TOP 25 Common Weakness Enumeration from CWE/SANS. For more information, you can read this.
Summary
Title New ircd-hybrid/ircd-ratbox packages fix arbitrary code execution
Informations
Name DSA-1980 First vendor Publication 2010-01-27
Vendor Debian Last vendor Modification 2010-01-27
Severity (Vendor) N/A Revision 1

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score NA
Base Score NA Environmental Score NA
impact SubScore NA Temporal Score NA
Exploitabality Sub Score NA
 
Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:M/Au:N/C:P/I:P/A:P)
Cvss Base Score 6.8 Attack Range Network
Cvss Impact Score 6.4 Attack Complexity Medium
Cvss Expoit Score 8.6 Authentication None Required
Calculate full CVSS 2.0 Vectors scores

Detail

David Leadbeater discovered an integer underflow that could be triggered via the LINKS command and can lead to a denial of service or the execution of arbitrary code (CVE-2009-4016). This issue affects both, ircd-hybrid and ircd-ratbox.

It was discovered that the ratbox IRC server is prone to a denial of service attack via the HELP command. The ircd-hybrid package is not vulnerable to this issue (CVE-2010-0300).

For the stable distribution (lenny), this problem has been fixed in version 1:7.2.2.dfsg.2-4+lenny1 of the ircd-hybrid package and in version 2.2.8.dfsg-2+lenny1 of ircd-ratbox.

Due to a bug in the archive software it was not possible to release the fix for the oldstable distribution (etch) simultaneously. The packages will be released as version 7.2.2.dfsg.2-3+etch1 once they become available.

For the testing distribution (squeeze) and the unstable distribution (sid), this problem will be fixed soon.

We recommend that you upgrade your ircd-hybrid/ircd-ratbox packages.

Original Source

Url : http://www.debian.org/security/2010/dsa-1980

CWE : Common Weakness Enumeration

% Id Name
100 % CWE-189 Numeric Errors (CWE/SANS Top 25)

OVAL Definitions

Definition Id: oval:org.mitre.oval:def:13188
 
Oval ID: oval:org.mitre.oval:def:13188
Title: DSA-1980-1 ircd-hybrid/ircd-ratbox -- integer underflow/denial of service
Description: David Leadbeater discovered an integer underflow that could be triggered via the LINKS command and can lead to a denial of service or the execution of arbitrary code. This issue affects both, ircd-hybrid and ircd-ratbox. It was discovered that the ratbox IRC server is prone to a denial of service attack via the HELP command. The ircd-hybrid package is not vulnerable to this issue. For the stable distribution, this problem has been fixed in version 1:7.2.2.dfsg.2-4+lenny1 of the ircd-hybrid package and in version 2.2.8.dfsg-2+lenny1 of ircd-ratbox. Due to a bug in the archive software it was not possible to release the fix for the oldstable distribution simultaneously. The packages will be released as version 7.2.2.dfsg.2-3+etch1 once they become available. For the testing distribution and the unstable distribution, this problem will be fixed soon. We recommend that you upgrade your ircd-hybrid/ircd-ratbox packages.
Family: unix Class: patch
Reference(s): DSA-1980-1
CVE-2009-4016
CVE-2010-0300
 Version: 5
Platform(s): Debian GNU/Linux 5.0
 Product(s): ircd-hybrid/ircd-ratbox
Definition Synopsis:
Definition Id: oval:org.mitre.oval:def:7105
 
Oval ID: oval:org.mitre.oval:def:7105
Title: DSA-1980 ircd-hybrid/ircd-ratbox -- integer underflow/denial of service
Description: David Leadbeater discovered an integer underflow that could be triggered via the LINKS command and can lead to a denial of service or the execution of arbitrary code. This issue affects both, ircd-hybrid and ircd-ratbox. It was discovered that the ratbox IRC server is prone to a denial of service attack via the HELP command. The ircd-hybrid package is not vulnerable to this issue.
Family: unix Class: patch
Reference(s): DSA-1980
CVE-2009-4016
CVE-2010-0300
 Version: 5
Platform(s): Debian GNU/Linux 5.0
 Product(s): ircd-hybrid/ircd-ratbox
Definition Synopsis:

CPE : Common Platform Enumeration

TypeDescriptionCount
Application 2
Application 55
Application 17

OpenVAS Exploits

Date Description
2010-06-11 Name : Fedora Update for ircd-hybrid FEDORA-2010-9312
File : nvt/gb_fedora_2010_9312_ircd-hybrid_fc12.nasl
2010-06-11 Name : Fedora Update for ircd-ratbox FEDORA-2010-9312
File : nvt/gb_fedora_2010_9312_ircd-ratbox_fc12.nasl
2010-02-10 Name : FreeBSD Ports: ircd-ratbox
File : nvt/freebsd_ircd-ratbox.nasl
2010-02-01 Name : Debian Security Advisory DSA 1980-1 (ircd-hybrid/ircd-ratbox)
File : nvt/deb_1980_1.nasl
2010-01-28 Name : IRCD-Hybrid and ircd-ratbox 'LINKS' Command Remote Integer Underflow Vulnerab...
File : nvt/ircd_hybrid_37978.nasl
2010-01-28 Name : IRCD-Hybrid and ircd-ratbox 'LINKS' Command Remote Integer Underflow Vulnerab...
File : nvt/ircd_ratbox_37978.nasl
2010-01-28 Name : ircd-ratbox 'HELP' Command Denial Of Service Vulnerability
File : nvt/ircd_ratbox_37979.nasl

Open Source Vulnerability Database (OSVDB)

Id Description
62153 oftc-hybrid irc_string.c clean_string Function LINKS Command Remote Underflow
62152 ircd-ratbox irc_string.c clean_string Function LINKS Command Remote Underflow
62151 IRCD-hybrid irc_string.c clean_string Function LINKS Command Remote Underflow
62150 ircd-ratbox cache.c HELP Command NULL Dereference Remote DoS

Nessus® Vulnerability Scanner

Date Description
2010-07-01 Name : The remote Fedora host is missing one or more security updates.
File : fedora_2010-9312.nasl - Type : ACT_GATHER_INFO
2010-02-24 Name : The remote Debian host is missing a security-related update.
File : debian_DSA-1980.nasl - Type : ACT_GATHER_INFO
2010-01-29 Name : The remote FreeBSD host is missing one or more security-related updates.
File : freebsd_pkg_192609c80c5111df82a000248c9b4be7.nasl - Type : ACT_GATHER_INFO

Alert History

If you want to see full details history, please login or register.
0
Date Informations
2014-02-17 11:29:11
  • Multiple Updates