National Cyber-Alert System

Vulnerability Summary for CVE-2006-6811

Overview

KsIRC 1.3.12 allows remote attackers to cause a denial of service (crash) via a long PRIVMSG string when connecting to an Internet Relay Chat (IRC) server, which causes an assertion failure and results in a NULL pointer dereference. NOTE: this issue was originally reported as a buffer overflow.

Impact

CVSS Severity (version 2.0):

CVSS Version 2 Metrics:

Vendor Statments (disclaimer)

Official Statement from Red Hat (01/18/2007)

We do not consider a crash of a client application such as KsIRC to be a security issue.

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

External Source: XF

Name: ksirc-privmsg-bo(31134)

Hyperlink:http://xforce.iss.net/xforce/xfdb/31134

External Source: UBUNTU

Name: USN-409-1

Hyperlink:http://www.ubuntu.com/usn/usn-409-1

External Source: BID

Name: 21790

Hyperlink:http://www.securityfocus.com/bid/21790

External Source: BUGTRAQ

Name: 20070109 [KDE Security Advisory] ksirc Denial of Service vulnerability

Hyperlink:http://www.securityfocus.com/archive/1/archive/1/456379/100/0/threaded

External Source: MILW0RM

Name: 3023

Hyperlink:http://www.milw0rm.com/exploits/3023

External Source: MANDRIVA

Name: MDKSA-2007:009

Hyperlink:http://www.mandriva.com/security/advisories?name=MDKSA-2007:009

External Source: CONFIRM

Name: http://www.kde.org/info/security/advisory-20070109-1.txt

Hyperlink:http://www.kde.org/info/security/advisory-20070109-1.txt

External Source: VUPEN

Name: ADV-2006-5199

Hyperlink:http://www.frsirt.com/english/advisories/2006/5199

External Source: MISC

Name: http://www.addict3d.org/index.php?page=viewarticle&trace=0&type=security&ID=8468

Hyperlink:http://www.addict3d.org/index.php?page=viewarticle&trace=0&type=security&ID=8468

External Source: SECTRACK

Name: 1017453

Hyperlink:http://securitytracker.com/id?1017453

External Source: OSVDB

Name: 33443

Hyperlink:http://osvdb.org/33443

External Source: CONFIRM

Name: https://issues.rpath.com/browse/RPL-922

Hyperlink:https://issues.rpath.com/browse/RPL-922

External Source: GENTOO

Name: GLSA-200701-26

Hyperlink:http://security.gentoo.org/glsa/glsa-200701-26.xml

External Source: MILW0RM

Name: 3023

Hyperlink:http://milw0rm.com/exploits/3023