CVE-2007-5226

Publication date 5 October 2007

Last updated 24 July 2024


Ubuntu priority

Description

irc_server.c in dircproxy 1.2.0 and earlier allows remote attackers to cause a denial of service (segmentation fault) via an ACTION command without a parameter, which triggers a NULL pointer dereference, as demonstrated using a blank /me message from irssi.

Status

Package Ubuntu Release Status
dircproxy 7.04 feisty
Fixed 1.0.5-5ubuntu0.1
6.10 edgy
Fixed 1.0.5-4ubuntu0.6.06.1
6.06 LTS dapper
Fixed 1.0.5-4ubuntu0.6.06.1