CVE-2009-4893: Buffer Overflow
Published Jun 15, 2010
·Updated
Buffer overflow in UnrealIRCd 3.2beta11 through 3.2.8, when allow::options::noident is enabled, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unspecified vectors.
Affected Software
31 affected components
UnrealIRCd UnrealIRCd=3.2-beta11
UnrealIRCd UnrealIRCd=3.2.1
UnrealIRCd UnrealIRCd=3.2.1-pre1
UnrealIRCd UnrealIRCd=3.2.1-pre2
UnrealIRCd UnrealIRCd=3.2.2
UnrealIRCd UnrealIRCd=3.2.2-pre1
UnrealIRCd UnrealIRCd=3.2.3
UnrealIRCd UnrealIRCd=3.2.3-pre1
UnrealIRCd UnrealIRCd=3.2.3-pre2
UnrealIRCd UnrealIRCd=3.2.3-pre3
UnrealIRCd UnrealIRCd=3.2.3-pre4
UnrealIRCd UnrealIRCd=3.2.4
UnrealIRCd UnrealIRCd=3.2.4-pre1
UnrealIRCd UnrealIRCd=3.2.4-pre2
UnrealIRCd UnrealIRCd=3.2.4-rc1
UnrealIRCd UnrealIRCd=3.2.4-rc2
UnrealIRCd UnrealIRCd=3.2.4-rc3
UnrealIRCd UnrealIRCd=3.2.5
UnrealIRCd UnrealIRCd=3.2.5-rc1
UnrealIRCd UnrealIRCd=3.2.5-rc2
UnrealIRCd UnrealIRCd=3.2.5-rc3
UnrealIRCd UnrealIRCd=3.2.6
UnrealIRCd UnrealIRCd=3.2.6-rc1
UnrealIRCd UnrealIRCd=3.2.6-rc2
UnrealIRCd UnrealIRCd=3.2.6-rc3
UnrealIRCd UnrealIRCd=3.2.7
UnrealIRCd UnrealIRCd=3.2.7-rc1
UnrealIRCd UnrealIRCd=3.2.7-rc2
UnrealIRCd UnrealIRCd=3.2.8
UnrealIRCd UnrealIRCd=3.2.8-rc1
UnrealIRCd UnrealIRCd=3.2.8-rc2
Event History
Jun 15, 2010
CVE Published
via MITRE·01:00 AM
Data Sourced
via MITRE·01:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2009-4893?
The severity of CVE-2009-4893 is medium with a CVSS score of 6.8.
2
How can I fix CVE-2009-4893?
To fix CVE-2009-4893, upgrading UnrealIRCd to version 3.2.9 or later is recommended.
3
What type of vulnerability is CVE-2009-4893?
CVE-2009-4893 is a buffer overflow vulnerability.
4
What impacts could CVE-2009-4893 have on my system?
CVE-2009-4893 may lead to a denial of service (crash) and potentially allow arbitrary code execution.
5
Which versions of UnrealIRCd are affected by CVE-2009-4893?
UnrealIRCd versions 3.2beta11 through 3.2.8 are affected by CVE-2009-4893.