CVE-2007-5226

irc_server.c in dircproxy 1.2.0 and earlier allows remote attackers to cause a denial of service (segmentation fault) via an ACTION command without a parameter, which triggers a NULL pointer dereference, as demonstrated using a blank /me message from irssi.

Score

CVSS 2.0 5.0 Medium

Status

Modified - secalert@redhat.com

Published

2007-10-05

Last modified

2024-08-07

Weaknesses

CWE-20

Affected products

• Dircproxy (Dircproxy)

References

• http://dircproxy.securiweb.net/ticket/89
• https://bugzilla.redhat.com/show_bug.cgi?id=319301