CVE-2009-1789

Published: May 26, 2009Modified: Apr 23, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:N/A:P

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

mod/server.mod/servmsg.c in Eggheads Eggdrop and Windrop 1.6.19 and earlier allows remote attackers to cause a denial of service (crash) via a crafted PRIVMSG that causes an empty string to trigger a negative string length copy. NOTE: this issue exists because of an incorrect fix for CVE-2007-2807.

Affected (47)

Products: Eggheads: Eggdrop, Eggdrop Irc Bot · Philip Moore: Windrop

2 products

Eggdrop Irc Bot

1 product

Configuration A

47 vulnerable

Vulnerable Software	Affected Versions
Eggheads Eggdrop	Version 1.6.0
Eggheads Eggdrop	Version 1.6.10
Eggheads Eggdrop	Version 1.6.11
Eggheads Eggdrop	Version 1.6.12
Eggheads Eggdrop	Version 1.6.13
Eggheads Eggdrop	Version 1.6.14
Eggheads Eggdrop	Version 1.6.15
Eggheads Eggdrop	Version 1.6.16
Eggheads Eggdrop	Version 1.6.17
Eggheads Eggdrop	Version 1.6.18
Eggheads Eggdrop	Version 1.6.18 rc1
Eggheads Eggdrop	Version 1.6.1
Eggheads Eggdrop	Version 1.6.2
Eggheads Eggdrop	Version 1.6.3
Eggheads Eggdrop	Version 1.6.4
Eggheads Eggdrop	Version 1.6.5
Eggheads Eggdrop	Version 1.6.6
Eggheads Eggdrop	Version 1.6.7
Eggheads Eggdrop	Version 1.6.8
Eggheads Eggdrop	Version 1.6.9
Eggheads Eggdrop Irc Bot	version ≤ 1.6.19
Philip Moore Windrop	version ≤ 1.6.19
Philip Moore Windrop	Version 1.4.4
Philip Moore Windrop	Version 1.4.6
Philip Moore Windrop	Version 1.5.4
Philip Moore Windrop	Version 1.5.4 rc1
Philip Moore Windrop	Version 1.5.4 rc2
Philip Moore Windrop	Version 1.5.4a
Philip Moore Windrop	Version 1.6.0
Philip Moore Windrop	Version 1.6.0 rc1-rel2
Philip Moore Windrop	Version 1.6.0 rc1
Philip Moore Windrop	Version 1.6.10
Philip Moore Windrop	Version 1.6.12
Philip Moore Windrop	Version 1.6.13
Philip Moore Windrop	Version 1.6.15
Philip Moore Windrop	Version 1.6.16
Philip Moore Windrop	Version 1.6.17
Philip Moore Windrop	Version 1.6.18
Philip Moore Windrop	Version 1.6.19+ctcpfix
Philip Moore Windrop	Version 1.6.1
Philip Moore Windrop	Version 1.6.2+bindsfix
Philip Moore Windrop	Version 1.6.3
Philip Moore Windrop	Version 1.6.4 sr1
Philip Moore Windrop	Version 1.6.6
Philip Moore Windrop	Version 1.6.7
Philip Moore Windrop	Version 1.6.8
Philip Moore Windrop	Version 1.6.9

References (32)

http://archives.neohapsis.com/archives/fulldisclosure/2009-05/0129.html

Source: cve@mitre.org

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=528778

Source: cve@mitre.org

http://cvs.eggheads.org/viewvc/viewvc.cgi/eggdrop1.6/doc/Changes1.6?revision=1.20&view=markup

Source: cve@mitre.org

PatchVendor Advisory

http://osvdb.org/54460

Source: cve@mitre.org

http://secunia.com/advisories/35104

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/35158

Source: cve@mitre.org

http://secunia.com/advisories/35690

Source: cve@mitre.org

http://www.debian.org/security/2009/dsa-1826

Source: cve@mitre.org

http://www.mandriva.com/security/advisories?name=MDVSA-2009:126

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/503574

Source: cve@mitre.org

http://www.securityfocus.com/bid/34985

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2009/1340

Source: cve@mitre.org

PatchVendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/50547

Source: cve@mitre.org

https://www.exploit-db.com/exploits/8695

Source: cve@mitre.org

https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01333.html

Source: cve@mitre.org

https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01337.html

Source: cve@mitre.org

http://archives.neohapsis.com/archives/fulldisclosure/2009-05/0129.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=528778

Source: af854a3a-2127-422b-91ae-364da2661108

http://cvs.eggheads.org/viewvc/viewvc.cgi/eggdrop1.6/doc/Changes1.6?revision=1.20&view=markup

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://osvdb.org/54460

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/35104

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/35158

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/35690

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.debian.org/security/2009/dsa-1826

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.mandriva.com/security/advisories?name=MDVSA-2009:126

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/503574

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/34985

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2009/1340

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/50547

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.exploit-db.com/exploits/8695

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01333.html

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01337.html

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.