CVE-2010-0303

2010-02-0420:15:23

CWE-20

[email protected]

web.nvd.nist.gov

ircd-hybrid

1.9.2

1.9.3

1.9.4

denial of service

cve-2010-0303

memoserv service

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

6.5 Medium

AI Score

Confidence

Low

0.087 Low

EPSS

Percentile

94.5%

JSON

mystring.c in hybserv in IRCD-Hybrid (aka Hybrid2 IRC Services) 1.9.2 through 1.9.4 allows remote attackers to cause a denial of service (daemon crash) via a “:help \t” private message to the MemoServ service.

Affected configurations

NVD

Node

dinko_korunichybserv2Match1.9.2

dinko_korunichybserv2Match1.9.3

dinko_korunichybserv2Match1.9.4

CPENameOperatorVersion
dinko_korunic:hybserv2dinko korunic hybserv2eq1.9.2
dinko_korunic:hybserv2dinko korunic hybserv2eq1.9.3
dinko_korunic:hybserv2dinko korunic hybserv2eq1.9.4

CPE	Name	Operator	Version
dinko_korunic:hybserv2	dinko korunic hybserv2	eq	1.9.2
dinko_korunic:hybserv2	dinko korunic hybserv2	eq	1.9.3
dinko_korunic:hybserv2	dinko korunic hybserv2	eq	1.9.4