Bug 501045

Summary:	Eggdrop: Incomplete fix for CVE-2007-2807
Product:	[Other] Security Response	Reporter:	Jan Lieskovsky <jlieskov>
Component:	vulnerability	Assignee:	Red Hat Product Security <security-response-team>
Status:	CLOSED DUPLICATE	QA Contact:
Severity:	medium	Docs Contact:
Priority:	medium
Version:	unspecified	CC:	bressers, redhat
Target Milestone:	---	Keywords:	Security
Target Release:	---
Hardware:	All
OS:	Linux
URL:	http://www.gossamer-threads.com/lists/fulldisc/full-disclosure/68341
Whiteboard:
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2010-03-22 18:36:31 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Jan Lieskovsky 2009-05-15 16:36:26 UTC

A stack-based buffer overflow in mod/server.mod/servrmsg.c, which might allow user-assisted, remote IRC servers to execute arbitrary code via a long private message, was originally found in Eggdrop 1.6.18, and possibly earlier versions (CVE-2007-2807).Thomas Sader reported, the original fix, fixing the issue
was incomplete (introduced another flaw).

References:
http://www.gossamer-threads.com/lists/fulldisc/full-disclosure/68341
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=528778

Upstream report:
http://www.eggheads.org/downloads/

Proposed patch (against latest Eggdrop version):
http://www.eggheads.org/redirect.php?url=ftp://ftp.eggheads.org/pub/eggdrop/patches/official/1.6/eggdrop1.6.19%2Bctcpfix.patch.gz

Comment 1 Josh Bressers 2010-03-22 18:36:31 UTC


*** This bug has been marked as a duplicate of bug 502650 ***