3.5

CVE-2010-2448

znc.cpp in ZNC before 0.092 allows remote authenticated users to cause a denial of service (crash) by requesting traffic statistics when there is an active unauthenticated connection, which triggers a NULL pointer dereference, as demonstrated using (1) a traffic link in the web administration pages or (2) the traffic command in the /znc shell.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Znc ≫ Znc Version <= 0.090
Znc ≫ Znc Version 0.034
Znc ≫ Znc Version 0.041
Znc ≫ Znc Version 0.043
Znc ≫ Znc Version 0.044
Znc ≫ Znc Version 0.045
Znc ≫ Znc Version 0.047
Znc ≫ Znc Version 0.050
Znc ≫ Znc Version 0.052
Znc ≫ Znc Version 0.054
Znc ≫ Znc Version 0.056
Znc ≫ Znc Version 0.058
Znc ≫ Znc Version 0.060
Znc ≫ Znc Version 0.062
Znc ≫ Znc Version 0.064
Znc ≫ Znc Version 0.066
Znc ≫ Znc Version 0.068
Znc ≫ Znc Version 0.070
Znc ≫ Znc Version 0.072
Znc ≫ Znc Version 0.074
Znc ≫ Znc Version 0.076
Znc ≫ Znc Version 0.078
Znc ≫ Znc Version 0.080
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 2.06% 0.789
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 3.5 6.8 2.9
AV:N/AC:M/Au:S/C:N/I:N/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=584929
http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043000.html
http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043043.html
http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043044.html
http://secunia.com/advisories/40523
Vendor Advisory
http://sourceforge.net/projects/znc/files/znc/0.092/znc-0.092-changelog.txt/view
http://www.debian.org/security/2010/dsa-2069
http://www.securityfocus.com/bid/40982
http://www.vupen.com/english/advisories/2010/1775
Vendor Advisory
http://znc.svn.sourceforge.net/viewvc/znc/trunk/znc.cpp?r1=2025&r2=2026&pathrev=2026
http://znc.svn.sourceforge.net/viewvc/znc?revision=2026&view=revision
Patch