CVE-2007-5226

Published: Oct 5, 2007Modified: Apr 23, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

irc_server.c in dircproxy 1.2.0 and earlier allows remote attackers to cause a denial of service (segmentation fault) via an ACTION command without a parameter, which triggers a NULL pointer dereference, as demonstrated using a blank /me message from irssi.

Affected (1)

Products: Dircproxy: Dircproxy

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Dircproxy Dircproxy	Up to 1.2.0

Related CWEs

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (4)

http://dircproxy.securiweb.net/ticket/89

Source: secalert@redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=319301

Source: secalert@redhat.com

http://dircproxy.securiweb.net/ticket/89

Source: af854a3a-2127-422b-91ae-364da2661108

https://bugzilla.redhat.com/show_bug.cgi?id=319301

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.