mod/server.mod/servmsg.c in Eggheads Eggdrop and Windrop 1.6.19 and earlier allows remote attackers to cause a denial of service (crash) via a crafted PRIVMSG that causes an empty string to trigger a negative string length copy. NOTE: this issue exists because of an incorrect fix for CVE-2007-2807.

Several vulnerabilities have been discovered in eggdrop, an advanced IRC robot. The Common Vulnerabilities and Exposures project identifies the following problems :

  - CVE-2007-2807     It was discovered that eggdrop is vulnerable to a buffer     overflow, which could result in a remote user executing     arbitrary code. The previous DSA (DSA-1448-1) did not     fix the issue correctly.

  - CVE-2009-1789     It was discovered that eggdrop is vulnerable to a denial     of service attack, that allows remote attackers to cause     a crash via a crafted PRIVMSG.

mod/server.mod/servmsg.c in Eggheads Eggdrop and Windrop 1.6.19 and earlier allows remote attackers to cause a denial of service (crash) via a crafted PRIVMSG that causes an empty string to trigger a negative string length copy. NOTE: this issue exists because of an incorrect fix for CVE-2007-2807 (CVE-2009-1789).

Update :

Packages for 2008.0 are provided for Corporate Desktop 2008.0 customers

Secunia reports :

The vulnerability is caused due to an error in the processing of private messages within the server module (/mod/server.mod/servrmsg.c). This can be exploited to cause a crash by sending a specially crafted message to the bot.

mod/server.mod/servmsg.c in Eggheads Eggdrop and Windrop 1.6.19 and earlier allows remote attackers to cause a denial of service (crash) via a crafted PRIVMSG that causes an empty string to trigger a negative string length copy. NOTE: this issue exists because of an incorrect fix for CVE-2007-2807. The current remote denial of service is tracked as CVE-2009-1789.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
44691	Debian DSA-1826-1 : eggdrop - several vulnerabilities	Nessus	Debian Local Security Checks	medium
38982	Mandriva Linux Security Advisory : eggdrop (MDVSA-2009:126-1)	Nessus	Mandriva Local Security Checks	medium
38963	FreeBSD : eggdrop -- denial of service vulnerability (399f4cd7-4d59-11de-8811-0030843d3802)	Nessus	FreeBSD Local Security Checks	medium
38940	Fedora 10 : eggdrop-1.6.19-4.fc10 (2009-5572)	Nessus	Fedora Local Security Checks	medium
38939	Fedora 9 : eggdrop-1.6.19-4.fc9 (2009-5568)	Nessus	Fedora Local Security Checks	medium

Detections

Analytics

CVE-2009-1789

high

Tenable Plugins

medium

medium

medium

medium

medium