| Package | Affected versions | Patched versions |
|---|---|---|
| eggdrop | = 1.6.0= 1.6.1= 1.6.10= 1.6.11= 1.6.12= 1.6.13= 1.6.14= 1.6.15= 1.6.16= 1.6.17= 1.6.18= 1.6.2= 1.6.3= 1.6.4= 1.6.5= 1.6.6= 1.6.7= 1.6.8= 1.6.9 | |
| eggdrop irc bot | ≤ 1.6.19 | |
| windrop | = 1.4.4= 1.4.6= 1.5.4= 1.5.4a= 1.6.0= 1.6.1= 1.6.10= 1.6.12= 1.6.13= 1.6.15= 1.6.16= 1.6.17= 1.6.18= 1.6.19+ctcpfix= 1.6.2+bindsfix= 1.6.3= 1.6.4= 1.6.6= 1.6.7= 1.6.8= 1.6.9≤ 1.6.19 |
mod/server.mod/servmsg.c in Eggheads Eggdrop and Windrop 1.6.19 and earlier allows remote attackers to cause a denial of service (crash) via a crafted PRIVMSG that causes an empty string to trigger a negative string length copy. NOTE: this issue exists because of an incorrect fix for CVE-2007-2807.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free