NetSight
IP …
critical10.0Public exploit code

CVE-2003-0478

Format string vulnerability in (1) Bahamut IRCd 1.4.35 and earlier, and other IRC daemons based on Bahamut including (2) digatech 1.2.1, (3) methane 0.1.1, (4)…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Format string vulnerability in (1) Bahamut IRCd 1.4.35 and earlier, and other IRC daemons based on Bahamut including (2) digatech 1.2.1, (3) methane 0.1.1, (4) AndromedeIRCd 1.2.3-Release, and (5) ircd-RU, when running in debug mode, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a request containing format strings.

Affected products

VendorProductAffected versions
AndromedeAdromedeircd
Version 1.2.3
Daniel MossMethane
Version 0.1.1
Hans WesterhofDigatech
Version 1.2.1
WenetIrcd-Ru
All versions
BahamutIrcd
through 1.4.35

References