| Package | Affected versions | Patched versions |
|---|---|---|
| ventrilo | = 1= 1.01= 1.03= 1.04= 1.05= 1.06= 2= 2.1= 2.1.1= 2.1.2= 2.1.3= 2.1.4= 2.2= 2.3= 2.3.2= 3= 3.0.2 |
The decryption function in Flagship Industries Ventrilo 3.0.2 and earlier allows remote attackers to cause a denial of service (NULL pointer dereference and server crash) by sending a type 0 packet with an invalid version followed by another packet to TCP port 3784.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free