CVE-2010-0303

Published: Feb 4, 2010Modified: Apr 29, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

mystring.c in hybserv in IRCD-Hybrid (aka Hybrid2 IRC Services) 1.9.2 through 1.9.4 allows remote attackers to cause a denial of service (daemon crash) via a ":help \t" private message to the MemoServ service.

Affected (3)

Products: Dinko Korunic: Hybserv2

Dinko Korunic

1 product

Hybserv2

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Dinko Korunic Hybserv2	Version 1.9.2
Dinko Korunic Hybserv2	Version 1.9.3
Dinko Korunic Hybserv2	Version 1.9.4

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (16)

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=550389

Source: secalert@redhat.com

http://marc.info/?l=oss-security&m=126476591925300&w=2

Source: secalert@redhat.com

http://secunia.com/advisories/38350

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/38352

Source: secalert@redhat.com

Vendor Advisory

http://security.debian.org/pool/updates/main/h/hybserv/hybserv_1.9.2-4+lenny2.diff.gz

Source: secalert@redhat.com

Patch

http://www.debian.org/security/2010/dsa-1982

Source: secalert@redhat.com

http://www.securityfocus.com/bid/38006

Source: secalert@redhat.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/55992

Source: secalert@redhat.com

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=550389