CVE-2010-2448: Null Pointer Dereference
First published: Mon Jul 12 2010(Updated: )
znc.cpp in ZNC before 0.092 allows remote authenticated users to cause a denial of service (crash) by requesting traffic statistics when there is an active unauthenticated connection, which triggers a NULL pointer dereference, as demonstrated using (1) a traffic link in the web administration pages or (2) the traffic command in the /znc shell.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Znc Znc | =0.074 | |
| Znc Znc | =0.044 | |
| Znc Znc | =0.072 | |
| Znc Znc | =0.062 | |
| Znc Znc | =0.045 | |
| Znc Znc | =0.052 | |
| Znc Znc | =0.058 | |
| Znc Znc | =0.080 | |
| Znc Znc | =0.043 | |
| Znc Znc | =0.056 | |
| Znc Znc | =0.078 | |
| Znc Znc | =0.050 | |
| Znc Znc | <=0.090 | |
| Znc Znc | =0.034 | |
| Znc Znc | =0.076 | |
| Znc Znc | =0.070 | |
| Znc Znc | =0.064 | |
| Znc Znc | =0.068 | |
| Znc Znc | =0.054 | |
| Znc Znc | =0.060 | |
| Znc Znc | =0.041 | |
| Znc Znc | =0.047 | |
| Znc Znc | =0.066 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.securityfocus.com/bid/40982
- http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043044.html
- http://www.debian.org/security/2010/dsa-2069
- http://www.vupen.com/english/advisories/2010/1775
- http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043000.html
- http://znc.svn.sourceforge.net/viewvc/znc?revision=2026&view=revision
- http://znc.svn.sourceforge.net/viewvc/znc/trunk/znc.cpp?r1=2025&r2=2026&pathrev=2026
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=584929
- http://secunia.com/advisories/40523
- http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043043.html
- http://sourceforge.net/projects/znc/files/znc/0.092/znc-0.092-changelog.txt/view
- collector/nvd-historical
- collector/nvd-index
- agent/severity
- agent/references
- agent/weakness
- agent/author
- agent/type
- agent/event
- agent/softwarecombine
- agent/last-modified-date
- agent/remedy
- agent/description
- agent/first-publish-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/znc
- canonical/znc znc
- version/znc znc/0.074
- version/znc znc/0.044
- version/znc znc/0.072
- version/znc znc/0.062
- version/znc znc/0.045
- version/znc znc/0.052
- version/znc znc/0.058
- version/znc znc/0.080
- version/znc znc/0.043
- version/znc znc/0.056
- version/znc znc/0.078
- version/znc znc/0.050
- version/znc znc/0.090
- version/znc znc/0.034
- version/znc znc/0.076
- version/znc znc/0.070
- version/znc znc/0.064
- version/znc znc/0.068
- version/znc znc/0.054
- version/znc znc/0.060
- version/znc znc/0.041
- version/znc znc/0.047
- version/znc znc/0.066