medium5.0Public exploit code
CVE-2004-0605
Non-registered IRC users using (1) ircd-hybrid 7.0.1 and earlier, (2) ircd-ratbox 1.5.1 and earlier, or (3) ircd-ratbox 2.0rc6 and earlier do not have a rate-l…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- ircd-hybrid 7.0.1 / ircd-ratbox 1.5.1/2.0 - Socket Dequeuing Denial of Service2004-06-19 · dos · linux · Verified
Impact
Non-registered IRC users using (1) ircd-hybrid 7.0.1 and earlier, (2) ircd-ratbox 1.5.1 and earlier, or (3) ircd-ratbox 2.0rc6 and earlier do not have a rate-limit imposed, which could allow remote attackers to cause a denial of service by repeatedly making requests, which are slowly dequeued.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ircd-Hybrid | Ircd-Hybrid | through 7.0.1 |
| Ircd-Ratbox | Ircd-Ratbox | through 1.5.1 through 2.0_rc6 |
Weakness classification
References
- NVD record
- CVE.org record
- http://marc.info/?l=bugtraq&m=108766803817406&w=2
- http://www.securityfocus.com/bid/10572
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16457
- http://marc.info/?l=bugtraq&m=108766803817406&w=2
- http://www.securityfocus.com/bid/10572
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16457