InspIRCd: Denial of service

InspIRCd: Denial of service A buffer overflow in InspIRCd allows remote attackers to cause a Denial of Service. inspircd 2008-05-09 2008-05-09 215704 remote 1.1.19 1.1.19

InspIRCd (Inspire IRCd) is a modular C++ IRC daemon.

The "namesx" and "uhnames" modules do not properly validate network input, leading to a buffer overflow.

A remote attacker can send specially crafted IRC commands to the server, causing a Denial of Service.

Unload the "uhnames" module in the InspIRCd configuration.

All InspIRCd users should upgrade to the latest version:


    # emerge --sync
    # emerge --ask --oneshot --verbose ">=net-irc/inspircd-1.1.19"

CVE-2008-1925 rbu rbu rbu