FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

CVE-2005-0199

This CVE name corresponds to:

Entered	Topic
2005-02-13	ngircd -- buffer overflow vulnerability

The following information is adapted from the Common Vulnerabilities and Exposures (CVE) project. CVE and the CVE logo are trademarks of The MITRE Corporation. CVE content is Copyright 2005, The MITRE Corporation.

CVE-2005-0199 at cve.mitre.org

Details

Type	Candidate
Name	CVE-2005-0199
Phase	Assigned(20050131)

Description

Integer underflow in the Lists_MakeMask() function in lists.c in ngIRCd before 0.8.2 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a long MODE line that causes an incorrect length calculation, which leads to a buffer overflow.

References

Source	Reference
MLIST	[ngIRCd-ML] 20050126 ngIRCd 0.8.2
CONFIRM	http://bugs.gentoo.org/show_bug.cgi?id=79705
GENTOO	GLSA-200501-40
BID	12397
SECTRACK	1013047
SECUNIA	14056
SECUNIA	14059
XF	ngircd-listmakemask-bo(19143)