1. CVE-Search
  2. CVE-2009-1789
ID CVE-2009-1789
Summary mod/server.mod/servmsg.c in Eggheads Eggdrop and Windrop 1.6.19 and earlier allows remote attackers to cause a denial of service (crash) via a crafted PRIVMSG that causes an empty string to trigger a negative string length copy. NOTE: this issue exists because of an incorrect fix for CVE-2007-2807.
References
Vulnerable Configurations
  • cpe:2.3:a:eggheads:eggdrop:1.6.0:*:*:*:*:*:*:*
    cpe:2.3:a:eggheads:eggdrop:1.6.0:*:*:*:*:*:*:*
  • cpe:2.3:a:eggheads:eggdrop:1.6.1:*:*:*:*:*:*:*
    cpe:2.3:a:eggheads:eggdrop:1.6.1:*:*:*:*:*:*:*
  • cpe:2.3:a:eggheads:eggdrop:1.6.2:*:*:*:*:*:*:*
    cpe:2.3:a:eggheads:eggdrop:1.6.2:*:*:*:*:*:*:*
  • cpe:2.3:a:eggheads:eggdrop:1.6.3:*:*:*:*:*:*:*
    cpe:2.3:a:eggheads:eggdrop:1.6.3:*:*:*:*:*:*:*
  • cpe:2.3:a:eggheads:eggdrop:1.6.4:*:*:*:*:*:*:*
    cpe:2.3:a:eggheads:eggdrop:1.6.4:*:*:*:*:*:*:*
  • cpe:2.3:a:eggheads:eggdrop:1.6.5:*:*:*:*:*:*:*
    cpe:2.3:a:eggheads:eggdrop:1.6.5:*:*:*:*:*:*:*
  • cpe:2.3:a:eggheads:eggdrop:1.6.6:*:*:*:*:*:*:*
    cpe:2.3:a:eggheads:eggdrop:1.6.6:*:*:*:*:*:*:*
  • cpe:2.3:a:eggheads:eggdrop:1.6.7:*:*:*:*:*:*:*
    cpe:2.3:a:eggheads:eggdrop:1.6.7:*:*:*:*:*:*:*
  • cpe:2.3:a:eggheads:eggdrop:1.6.8:*:*:*:*:*:*:*
    cpe:2.3:a:eggheads:eggdrop:1.6.8:*:*:*:*:*:*:*
  • cpe:2.3:a:eggheads:eggdrop:1.6.9:*:*:*:*:*:*:*
    cpe:2.3:a:eggheads:eggdrop:1.6.9:*:*:*:*:*:*:*
  • cpe:2.3:a:eggheads:eggdrop:1.6.10:*:*:*:*:*:*:*
    cpe:2.3:a:eggheads:eggdrop:1.6.10:*:*:*:*:*:*:*
  • cpe:2.3:a:eggheads:eggdrop:1.6.11:*:*:*:*:*:*:*
    cpe:2.3:a:eggheads:eggdrop:1.6.11:*:*:*:*:*:*:*
  • cpe:2.3:a:eggheads:eggdrop:1.6.12:*:*:*:*:*:*:*
    cpe:2.3:a:eggheads:eggdrop:1.6.12:*:*:*:*:*:*:*
  • cpe:2.3:a:eggheads:eggdrop:1.6.13:*:*:*:*:*:*:*
    cpe:2.3:a:eggheads:eggdrop:1.6.13:*:*:*:*:*:*:*
  • cpe:2.3:a:eggheads:eggdrop:1.6.14:*:*:*:*:*:*:*
    cpe:2.3:a:eggheads:eggdrop:1.6.14:*:*:*:*:*:*:*
  • cpe:2.3:a:eggheads:eggdrop:1.6.15:*:*:*:*:*:*:*
    cpe:2.3:a:eggheads:eggdrop:1.6.15:*:*:*:*:*:*:*
  • cpe:2.3:a:eggheads:eggdrop:1.6.16:*:*:*:*:*:*:*
    cpe:2.3:a:eggheads:eggdrop:1.6.16:*:*:*:*:*:*:*
  • cpe:2.3:a:eggheads:eggdrop:1.6.17:*:*:*:*:*:*:*
    cpe:2.3:a:eggheads:eggdrop:1.6.17:*:*:*:*:*:*:*
  • cpe:2.3:a:eggheads:eggdrop:1.6.18:*:*:*:*:*:*:*
    cpe:2.3:a:eggheads:eggdrop:1.6.18:*:*:*:*:*:*:*
  • cpe:2.3:a:eggheads:eggdrop:1.6.18:rc1:*:*:*:*:*:*
    cpe:2.3:a:eggheads:eggdrop:1.6.18:rc1:*:*:*:*:*:*
  • cpe:2.3:a:eggheads:eggdrop_irc_bot:*:*:*:*:*:*:*:*
    cpe:2.3:a:eggheads:eggdrop_irc_bot:*:*:*:*:*:*:*:*
  • cpe:2.3:a:philip_moore:windrop:1.4.4:*:final:*:*:*:*:*
    cpe:2.3:a:philip_moore:windrop:1.4.4:*:final:*:*:*:*:*
  • cpe:2.3:a:philip_moore:windrop:1.4.6:*:*:*:*:*:*:*
    cpe:2.3:a:philip_moore:windrop:1.4.6:*:*:*:*:*:*:*
  • cpe:2.3:a:philip_moore:windrop:1.5.4:*:final:*:*:*:*:*
    cpe:2.3:a:philip_moore:windrop:1.5.4:*:final:*:*:*:*:*
  • cpe:2.3:a:philip_moore:windrop:1.5.4:rc1:*:*:*:*:*:*
    cpe:2.3:a:philip_moore:windrop:1.5.4:rc1:*:*:*:*:*:*
  • cpe:2.3:a:philip_moore:windrop:1.5.4:rc2:*:*:*:*:*:*
    cpe:2.3:a:philip_moore:windrop:1.5.4:rc2:*:*:*:*:*:*
  • cpe:2.3:a:philip_moore:windrop:1.5.4a:*:*:*:*:*:*:*
    cpe:2.3:a:philip_moore:windrop:1.5.4a:*:*:*:*:*:*:*
  • cpe:2.3:a:philip_moore:windrop:1.6.0:*:final:*:*:*:*:*
    cpe:2.3:a:philip_moore:windrop:1.6.0:*:final:*:*:*:*:*
  • cpe:2.3:a:philip_moore:windrop:1.6.0:rc1:*:*:*:*:*:*
    cpe:2.3:a:philip_moore:windrop:1.6.0:rc1:*:*:*:*:*:*
  • cpe:2.3:a:philip_moore:windrop:1.6.0:rc1-rel2:*:*:*:*:*:*
    cpe:2.3:a:philip_moore:windrop:1.6.0:rc1-rel2:*:*:*:*:*:*
  • cpe:2.3:a:philip_moore:windrop:1.6.1:*:*:*:*:*:*:*
    cpe:2.3:a:philip_moore:windrop:1.6.1:*:*:*:*:*:*:*
  • cpe:2.3:a:philip_moore:windrop:1.6.2\+bindsfix:*:*:*:*:*:*:*
    cpe:2.3:a:philip_moore:windrop:1.6.2\+bindsfix:*:*:*:*:*:*:*
  • cpe:2.3:a:philip_moore:windrop:1.6.3:*:*:*:*:*:*:*
    cpe:2.3:a:philip_moore:windrop:1.6.3:*:*:*:*:*:*:*
  • cpe:2.3:a:philip_moore:windrop:1.6.4:sr1:*:*:*:*:*:*
    cpe:2.3:a:philip_moore:windrop:1.6.4:sr1:*:*:*:*:*:*
  • cpe:2.3:a:philip_moore:windrop:1.6.6:*:*:*:*:*:*:*
    cpe:2.3:a:philip_moore:windrop:1.6.6:*:*:*:*:*:*:*
  • cpe:2.3:a:philip_moore:windrop:1.6.7:*:*:*:*:*:*:*
    cpe:2.3:a:philip_moore:windrop:1.6.7:*:*:*:*:*:*:*
  • cpe:2.3:a:philip_moore:windrop:1.6.8:*:*:*:*:*:*:*
    cpe:2.3:a:philip_moore:windrop:1.6.8:*:*:*:*:*:*:*
  • cpe:2.3:a:philip_moore:windrop:1.6.9:*:*:*:*:*:*:*
    cpe:2.3:a:philip_moore:windrop:1.6.9:*:*:*:*:*:*:*
  • cpe:2.3:a:philip_moore:windrop:1.6.10:*:*:*:*:*:*:*
    cpe:2.3:a:philip_moore:windrop:1.6.10:*:*:*:*:*:*:*
  • cpe:2.3:a:philip_moore:windrop:1.6.12:*:*:*:*:*:*:*
    cpe:2.3:a:philip_moore:windrop:1.6.12:*:*:*:*:*:*:*
  • cpe:2.3:a:philip_moore:windrop:1.6.13:*:*:*:*:*:*:*
    cpe:2.3:a:philip_moore:windrop:1.6.13:*:*:*:*:*:*:*
  • cpe:2.3:a:philip_moore:windrop:1.6.15:*:*:*:*:*:*:*
    cpe:2.3:a:philip_moore:windrop:1.6.15:*:*:*:*:*:*:*
  • cpe:2.3:a:philip_moore:windrop:1.6.16:*:*:*:*:*:*:*
    cpe:2.3:a:philip_moore:windrop:1.6.16:*:*:*:*:*:*:*
  • cpe:2.3:a:philip_moore:windrop:1.6.17:*:*:*:*:*:*:*
    cpe:2.3:a:philip_moore:windrop:1.6.17:*:*:*:*:*:*:*
  • cpe:2.3:a:philip_moore:windrop:1.6.18:*:*:*:*:*:*:*
    cpe:2.3:a:philip_moore:windrop:1.6.18:*:*:*:*:*:*:*
  • cpe:2.3:a:philip_moore:windrop:*:*:*:*:*:*:*:*
    cpe:2.3:a:philip_moore:windrop:*:*:*:*:*:*:*:*
  • cpe:2.3:a:philip_moore:windrop:1.6.19\+ctcpfix:*:*:*:*:*:*:*
    cpe:2.3:a:philip_moore:windrop:1.6.19\+ctcpfix:*:*:*:*:*:*:*
CVSS
Base: 4.3 (as of 29-09-2017 - 01:34)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
NETWORK MEDIUM NONE
Impact
ConfidentialityIntegrityAvailability
NONE NONE PARTIAL
cvss-vector via4 AV:N/AC:M/Au:N/C:N/I:N/A:P
refmap via4
bid 34985
bugtraq 20090515 eggdrop/windrop remote crash vulnerability
confirm
debian DSA-1826
exploit-db 8695
fedora
  • FEDORA-2009-5568
  • FEDORA-2009-5572
fulldisc 20090514 eggdrop/windrop remote crash vulnerability
mandriva MDVSA-2009:126
osvdb 54460
secunia
  • 35104
  • 35158
  • 35690
vupen ADV-2009-1340
xf eggdrop-servmsg-dos(50547)
Last major update 29-09-2017 - 01:34
Published 26-05-2009 - 16:30
Last modified 29-09-2017 - 01:34
Back to Top