CVE-2008-1501

The send_user_mode function in s_user.c in (1) Undernet ircu 2.10.12.12 and earlier, (2) snircd 1.3.4 and earlier, and unspecified other ircu derivatives allows remote attackers to cause a denial of service (daemon crash) via a malformed MODE command.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:N/I:N/A:P
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 95%
VendorProductVersion
ircuircu
𝑥
≤ 2.10.12.12
quakenetsnircd
𝑥
≤ 1.3.4
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
ircd-ircu
bookworm
2.10.12.10.dfsg1-3
fixed
bullseye
2.10.12.10.dfsg1-3
fixed
sid
2.10.12.19+dfsg-1
fixed
trixie
2.10.12.19+dfsg-1
fixed
References
http://hg.quakenet.org/snircd/rev/2da2b881d9f5
http://lists.grok.org.uk/pipermail/full-disclosure/2008-March/060906.html
http://osvdb.org/43613
http://secunia.com/advisories/29481
http://secunia.com/advisories/29486
http://securityreason.com/securityalert/3779
http://www.securityfocus.com/archive/1/489990/100/0/threaded
http://www.securityfocus.com/bid/28413
http://www.securitytracker.com/id?1019687
http://www.securitytracker.com/id?1019688
http://www.vupen.com/english/advisories/2008/0977
http://www.vupen.com/english/advisories/2008/0978
https://exchange.xforce.ibmcloud.com/vulnerabilities/41397
https://exchange.xforce.ibmcloud.com/vulnerabilities/41401
https://www.exploit-db.com/exploits/5306
http://hg.quakenet.org/snircd/rev/2da2b881d9f5
http://lists.grok.org.uk/pipermail/full-disclosure/2008-March/060906.html
http://osvdb.org/43613
http://secunia.com/advisories/29481
http://secunia.com/advisories/29486
http://securityreason.com/securityalert/3779
http://www.securityfocus.com/archive/1/489990/100/0/threaded
http://www.securityfocus.com/bid/28413
http://www.securitytracker.com/id?1019687
http://www.securitytracker.com/id?1019688
http://www.vupen.com/english/advisories/2008/0977
http://www.vupen.com/english/advisories/2008/0978
https://exchange.xforce.ibmcloud.com/vulnerabilities/41397
https://exchange.xforce.ibmcloud.com/vulnerabilities/41401
https://www.exploit-db.com/exploits/5306