Package: ircii-pana Severity: grave Tags: security Hi, the following CVE was published for ircii-pana. CVE-2007-4584[0]: Stack-based buffer overflow in BitchX 1.1 Final allows remote IRC servers to execute arbitrary code via a long string in a MODE command, related to the p_mode variable.
If you fix it please include the CVE id in your changelog. http://www.milw0rm.com/exploits/4321 can be used to test this vulnerability. [0] http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4584 Kind regards Nico -- Nico Golde - http://ngolde.de - [EMAIL PROTECTED] - GPG: 0x73647CFF For security reasons, all text in this mail is double-rot13 encrypted.
pgpXXE7tsw7fc.pgp
Description: PGP signature