Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2005-0199: ngIRCd may crash or be hijacked by long commands

CVE-2005-0199 · published 21 years ago

Summary

The ngIRCd chat server (versions before 0.8.2) miscalculates the length of a very long MODE command. This mistake can cause the program to stop working or allow an attacker to run their own code. Upgrade to version 0.8.2 or later to fix the issue.

What to do

Update barton ngircd to version 0.8.2 or later.

Affected software

Vendor	Product	Affected versions
barton	ngircd	< 0.8.2 `cpe:2.3:a:barton:ngircd::::::::`

Original advisory text

Integer underflow in the Lists_MakeMask() function in lists.c in ngIRCd before 0.8.2 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a long MODE line that causes an incorrect length calculation, which leads to a buffer overflow.

References

http://arthur.ath.cx/pipermail/ngircd-ml/2005-January/000228.html Broken Link Patch
http://bugs.gentoo.org/show_bug.cgi?id=79705 Issue Tracking
http://secunia.com/advisories/14056 Broken Link
http://secunia.com/advisories/14059 Broken Link
http://securitytracker.com/id?1013047 Broken Link Third Party Advisory VDB Entry
http://www.gentoo.org/security/en/glsa/glsa-200501-40.xml Patch Third Party Advisory
http://www.securityfocus.com/bid/12397 Broken Link Exploit Patch Third Party Advisory VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/19143 Third Party Advisory VDB Entry

Fix within

Internet-facing 3 days

Internal 60 days

Not known to be exploited
Can be exploited automatically (estimated)
Gives an attacker full control (estimated)

Severity

9.8 Critical

Exploitation

19% chance of attack within 30 days

Type

CWE-191Integer Underflow (Wrap or Wraparound)

Timeline

Published2 May 2005

Updated29 Sep 2026

First seen29 Sep 2026

Sources

CVE-2005-0199 · NVD

Track software like this

Free during beta