CVE-2010-2448
- State
- Published
- Severity
- Not scored
- Published
- Jul 12, 2010
- Updated
- Sep 16, 2024
- Reserved
- Jun 24, 2010
Description
znc.cpp in ZNC before 0.092 allows remote authenticated users to cause a denial of service (crash) by requesting traffic statistics when there is an active unauthenticated connection, which triggers a NULL pointer dereference, as demonstrated using (1) a traffic link in the web administration pages or (2) the traffic command in the /znc shell.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- http://znc.svn.sourceforge.net/viewvc/znc/trunk/znc.cpp?r1=2025&r2=2026&pathrev=2026
- ADV-2010-1775vdb-entry
- FEDORA-2010-10078vendor-advisory
- 40523third-party-advisory
- http://sourceforge.net/projects/znc/files/znc/0.092/znc-0.092-changelog.txt/view
- 40982vdb-entry
- http://znc.svn.sourceforge.net/viewvc/znc?revision=2026&view=revision
- FEDORA-2010-10042vendor-advisory
- FEDORA-2010-10082vendor-advisory
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=584929
- DSA-2069vendor-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.