Gentoo: bitchx denial of service vulnerability
A denial of service vulnerability exists in BitchX.
Summary
- --------------------------------------------------------------------- GENTOO LINUX SECURITY ANNOUNCEMENT 200302-11 - --------------------------------------------------------------------- DATE : 2003-02-20 17:47 UTC
- ---------------------------------------------------------------------
From advisory:
"A denial of service vulnerability exists in BitchX. Sending a malformed RPL_NAMREPLY numeric 353 causes BitchX to segfault."
Read the full advisory at: http://marc.theaimsgroup.com/?l=bugtraq&m=104554352513997&w=2
SOLUTION
It is recommended that all Gentoo Linux users who are running net-irc/bitchx upgrade to bitchx-1.0.19-r4 as follows:
emerge sync emerge -u bitchx emerge clean
- --------------------------------------------------------------------- aliz@gentoo.org - GnuPG key is available at - ---------------------------------------------------------------------
Resolution
References
Availability
Concerns
Severity
PACKAGE : bitchx
SUMMARY : denial of service
EXPLOIT : remote
