USN-800-1: irssi vulnerability

iBot · #1 (**permalink**) 07-13-2009

Referenced CVEs:
CVE-2009-1959

Description:
===========================================================Ubuntu Security Notice USN-800-1 July 13, 2009irssi vulnerabilityCVE-2009-1959===========================================================A security issue affects the following Ubuntu releases:Ubuntu 6.06 LTSUbuntu 8.04 LTSUbuntu 8.10Ubuntu 9.04This advisory also applies to the corresponding versions ofKubuntu, Edubuntu, and Xubuntu.The problem can be corrected by upgrading your system to thefollowing package versions:Ubuntu 6.06 LTS: irssi 0.8.10-1ubuntu1.1Ubuntu 8.04 LTS: irssi 0.8.12-3ubuntu3.1Ubuntu 8.10: irssi 0.8.12-4ubuntu2.1Ubuntu 9.04: irssi 0.8.12-6ubuntu1.1After a standard system upgrade you need to restart irssi to effect thenecessary changes.Details follow:It was discovered that irssi did not properly check the length of stringswhen processing WALLOPS messages. If a user connected to an IRC networkwhere an attacker had IRC operator privileges, a remote attacker couldcause a denial of service.

More...

More UNIX and Linux Forum Topics You Might Find Helpful
Thread	Thread Starter	Forum	Replies	Last Post
USN-705-1: NTP vulnerability	iBot	Security Advisories (RSS)	0	01-08-2009 02:50 PM
USN-664-1: Tk vulnerability	iBot	Security Advisories (RSS)	0	11-06-2008 03:50 PM
Compiling IRSSI on Solaris 10	FloridaBSD	SUN Solaris	2	09-20-2008 01:41 AM
irssi on solaris	empty	SUN Solaris	1	03-16-2008 12:46 PM
S-164: Tk Vulnerability	iBot	Security Advisories (RSS)	0	02-11-2008 05:10 PM

Thread Tools	Search this Thread
Show Printable Version Email this Page	Search this Thread: Advanced Search
Display Modes	Rate This Thread
Switch to Linear Mode Hybrid Mode Switch to Threaded Mode	Rate This Thread:


	Powered by