modules/m_capab.c in (1) ircd-ratbox before 3.0.8 and (2) Charybdis before 3.4.2 does not properly support capability negotiation during server handshakes, which allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a malformed request.

The remote host is affected by the vulnerability described in GLSA-201405-21 (Charybdis, ShadowIRCd: Denial of Service)

    A vulnerability has been discovered in Charybdis and ShadowIRCd. Please       review the CVE identifier referenced below for details.
  Impact :

    A remote attacker may be able to cause a Denial of Service condition.
  Workaround :

    There is no known workaround at this time.

The remote host is running a version of ShadowIRCd that is affected by a denial of service (DoS) vulnerability.  An issue exists in the 'CAPAB' module in 'm_capab.c' that causes servers to improperly handle negotiation handshakes. 

An unauthenticated, remote attacker could exploit this issue with a specially crafted request, impacting the availability of the service.

The remote host is running a version of ircd-ratbox that is affected by a denial of service (DoS) vulnerability.  An issue exists in the 'CAPAB' module in 'm_capab.c' that causes servers to improperly handle negotiation handshakes. 

An unauthenticated, remote attacker could exploit this issue with a specially crafted request, impacting the availability of the service.

The remote host is running a version of Charybdis IRCd that is affected by a denial of service (DoS) vulnerability.  An issue exists in the 'CAPAB' module in 'm_capab.c' that causes servers to improperly handle negotiation handshakes. 

An unauthenticated, remote attacker could exploit this issue with a specially crafted request, impacting the availability of the service.

It was discovered that a bug in the server capability negotiation code of ircd-ratbox could result in denial of service.

ID	Name	Product	Family	Severity
74063	GLSA-201405-21 : Charybdis, ShadowIRCd: Denial of Service	Nessus	Gentoo Local Security Checks	medium
65198	ShadowIRCd m_capab.c Denial of Service	Nessus	Misc.	medium
65197	ircd-ratbox m_capab.c Denial of Service	Nessus	Misc.	medium
65196	Charybdis IRCd m_capab.c Denial of Service	Nessus	Misc.	medium
64082	Debian DSA-2612-2 : ircd-ratbox - programming error	Nessus	Debian Local Security Checks	medium

Detections

Analytics

CVE-2012-6084

high

Tenable Plugins

medium

medium

medium

medium

medium