CVE ID:	CVE-2010-2448
Description:	znc.cpp in ZNC before 0.092 allows remote authenticated users to cause a denial of service (crash) by requesting traffic statistics when there is an active unauthenticated connection, which triggers a NULL pointer dereference, as demonstrated using (1) a traffic link in the web administration pages or (2) the traffic command in the /znc shell.
Test IDs:	1.3.6.1.4.1.25623.1.0.100683
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2010-2448 BugTraq ID: 40982 http://www.securityfocus.com/bid/40982 Debian Security Information: DSA-2069 (Google Search) http://www.debian.org/security/2010/dsa-2069 http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043000.html http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043043.html http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043044.html http://znc.svn.sourceforge.net/viewvc/znc/trunk/znc.cpp?r1=2025&r2=2026&pathrev=2026 http://secunia.com/advisories/40523 http://www.vupen.com/english/advisories/2010/1775