FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

irc-ratbox -- multiple vulnerabilities

Affected packages
ircd-ratbox < 2.2.9
ircd-ratbox-devel < 3.0.6

Details

VuXML ID 192609c8-0c51-11df-82a0-00248c9b4be7
Discovery 2010-01-25
Entry 2010-01-28

SecurityFocus reports:

The first affects the /quote HELP module and allows a user to trigger an IRCD crash on some platforms.

The second affects the /links processing module when the flatten_links configuration option is not enabled.

References

CVE Name CVE-2009-4016
CVE Name CVE-2010-0300
URL http://lists.ratbox.org/pipermail/ircd-ratbox/2010-January/000890.html
URL http://lists.ratbox.org/pipermail/ircd-ratbox/2010-January/000891.html
URL http://www.debian.org/security/2010/dsa-1980