PTnet IRCD Lets Remote Users Consume All Available Memory
|
|
SecurityTracker Alert ID: 1015425 |
|
SecurityTracker URL: http://securitytracker.com/id/1015425
|
|
CVE Reference:
GENERIC-MAP-NOMATCH
(Links to External Site)
|
Date: Dec 30 2005
|
Impact:
Denial of service via network
|
Exploit Included: Yes
|
Version(s): 1.5, 1.6
|
Description:
A vulnerability was reported in PTnet IRCD. A remote user can cause denial of service conditions.
A remote user can attempt to join a locked channel (such as all #*.log channels) that they are not authorized to access. This will cause the system to display an access control error message but also to allocate memory and leave the channel open. A remote user can open multiple channels to cause the target service to consume all available memory and restart.
The flaw resides in 'channel.c' in the m_join() function.
blackfile reported this vulnerability.
|
Impact:
A remote user can cause the target service to restart.
|
Solution:
No solution was available at the time of this entry.
|
Cause:
Resource error, State error
|
Underlying OS:
Linux (Any), UNIX (Any)
|
|
Message History:
None.
|
Source Message Contents
|
|
|
[Original Message Not Available for Viewing]
|
|
