NetSight
IP …
medium5.0Public exploit code

CVE-2006-4126

The dc_chat function in cmd.dc.c in DConnect Daemon 0.7.0 and earlier allows remote attackers to cause a denial of service (application crash) by sending a cli…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

The dc_chat function in cmd.dc.c in DConnect Daemon 0.7.0 and earlier allows remote attackers to cause a denial of service (application crash) by sending a client message before providing the nickname, which triggers a null pointer dereference.

Affected products

VendorProductAffected versions
DconnectDconnect Daemon
Versions 0.0.2, 0.0.3, 0.7.0

References