ID de Prueba:	1.3.6.1.4.1.25623.1.0.800634
Categoría:	Denial of Service
Título:	Irssi Off-by-one Read/Write DoS Vulnerability - Linux
Resumen:	Irssi is prone to a denial of service (DoS) vulnerability.
Descripción:	Summary: Irssi is prone to a denial of service (DoS) vulnerability. Vulnerability Insight: Off-by-one error in the 'event_wallops' function in fe-common/irc/fe-events.c when processing empty commands sent by IRC servers, which triggers a one-byte buffer under-read and a one-byte buffer underflow. Vulnerability Impact: Successful exploitation will allow attackers to cause memory corruption, and can crash an affected application by tricking a user into connecting to a malicious IRC server. Affected Software/OS: Irssi version 0.8.13 and prior on Linux Solution: No known solution was made available for at least one year since the disclosure of this vulnerability. Likely none will be provided anymore. General solution options are to upgrade to a newer release, disable respective features, remove the product or replace the product by another one. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2009-1959 BugTraq ID: 35399 http://www.securityfocus.com/bid/35399 https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00146.html http://www.mandriva.com/security/advisories?name=MDVSA-2009:133 http://xorl.wordpress.com/2009/05/28/irssi-event_wallops-off-by-one-readwrite/ http://www.openwall.com/lists/oss-security/2009/05/29/3 http://www.securitytracker.com/id?1022410 http://secunia.com/advisories/35685 http://secunia.com/advisories/35812 http://secunia.com/advisories/36152 SuSE Security Announcement: SUSE-SR:2009:012 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html http://www.ubuntu.com/usn/usn-800-1 http://www.vupen.com/english/advisories/2009/1596 XForce ISS Database: irssi-eventwallops-dos(51184) https://exchange.xforce.ibmcloud.com/vulnerabilities/51184
Copyright	Copyright (C) 2009 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.