OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
[sec-adv] BNC IRC proxy Denial of Service

From: Secunia Security Advisories (sec-advsecunia.com)
Date: Fri May 30 2003 - 05:52:32 CDT


TITLE:
BNC IRC proxy Denial of Service

READ ONLINE:
http://www.secunia.com/advisories/8900/

CRITICAL:
Not critical

IMPACT:
DoS

WHERE:
From local network

SOFTWARE:
BNC IRC proxy 2.x

DESCRIPTION:
A vulnerability has been identified in BNC IRC proxy, allowing
malicious people to cause a Denial of Service.

The problem is that the service can't handle multiple invalid
requests. This causes the service to stop accepting new requests.

SOLUTION:
The latest version isn't vulnerable.

Make sure that the proxy only can be reached by trusted users.

ORIGINAL ADVISORY:
http://www.gotbnc.com/changes.html

----------------------------------------------------------------------

Secunia recommends that you verify all advisories you receive, by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

Contact details:
Web : http://www.secunia.com/
E-mail : supportsecunia.com
Tel : +44 (0) 20 7016 2693
Fax : +44 (0) 20 7637 0419

----------------------------------------------------------------------

Unsubscribe: Secunia Security Advisories

----------------------------------------------------------------------