Description (CNA)
Multiple format string vulnerabilities in DConnect Daemon 0.7.0 and earlier allow remote administrators to execute arbitrary code via format string specifiers that are not properly handled when calling the (1) privmsg() or (2) pubmsg functions from (a) cmd.user.c, (b) penalties.c, or (c) cmd.dc.c.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- http://www.securityfocus.com/archive/1/442440/100/0/threaded
- http://www.vupen.com/english/advisories/2006/3181
- https://exchange.xforce.ibmcloud.com/vulnerabilities/28280
- http://secunia.com/advisories/21384
- http://securityreason.com/securityalert/1377
- http://www.dc.ds.pg.gda.pl/
- http://securitytracker.com/id?1016641
- http://www.securityfocus.com/bid/19371
- http://www.dc.ds.pg.gda.pl/?page=doc&doc=changelog
ADP enrichment
No English description supplied.
- http://www.securityfocus.com/archive/1/442440/100/0/threaded
- http://www.vupen.com/english/advisories/2006/3181
- https://exchange.xforce.ibmcloud.com/vulnerabilities/28280
- http://secunia.com/advisories/21384
- http://securityreason.com/securityalert/1377
- http://www.dc.ds.pg.gda.pl/
- http://securitytracker.com/id?1016641
- http://www.securityfocus.com/bid/19371
- http://www.dc.ds.pg.gda.pl/?page=doc&doc=changelog