Candidate: CVE-2009-4016
PublicDate: 2010-02-04 20:15:00 UTC
References:
 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4016
 http://www.debian.org/security/2010/dsa-1980
Description:
 Integer underflow in the clean_string function in irc_string.c in (1)
 IRCD-hybrid 7.2.2 and 7.2.3, (2) ircd-ratbox before 2.2.9, and (3)
 oftc-hybrid before 1.6.8, when flatten_links is disabled, allows remote
 attackers to execute arbitrary code or cause a denial of service (daemon
 crash) via a LINKS command.
Ubuntu-Description:
Notes:
Bugs:
Priority: medium
Discovered-by:
Assigned-to:
CVSS: 

Patches_ircd-hybrid:
 upstream: http://svn.ircd-hybrid.org:8000/viewcvs.cgi?rev=1044&view=rev
upstream_ircd-hybrid: needs-triage
dapper_ircd-hybrid: ignored (reached end-of-life)
hardy_ircd-hybrid: released (1:7.2.2.dfsg.2-3+etch1build0.8.04.1)
intrepid_ircd-hybrid: released (1:7.2.2.dfsg.2-4+lenny1build0.8.10.1)
jaunty_ircd-hybrid: released (1:7.2.2.dfsg.2-6ubuntu1.1)
karmic_ircd-hybrid: released (1:7.2.2.dfsg.2-6ubuntu2.0.9.10.1)
lucid_ircd-hybrid: released (1:7.2.2.dfsg.2-6ubuntu3)
maverick_ircd-hybrid: released (1:7.2.2.dfsg.2-6ubuntu3)
natty_ircd-hybrid: released (1:7.2.2.dfsg.2-6ubuntu3)
oneiric_ircd-hybrid: released (1:7.2.2.dfsg.2-6ubuntu3)
precise_ircd-hybrid: released (1:7.2.2.dfsg.2-6ubuntu3)
precise/esm_ircd-hybrid: DNE (precise was released [1:7.2.2.dfsg.2-6ubuntu3])
quantal_ircd-hybrid: released (1:7.2.2.dfsg.2-6ubuntu3)
raring_ircd-hybrid: released (1:7.2.2.dfsg.2-6ubuntu3)
saucy_ircd-hybrid: released (1:7.2.2.dfsg.2-6ubuntu3)
trusty_ircd-hybrid: released (1:7.2.2.dfsg.2-6ubuntu3)
trusty/esm_ircd-hybrid: DNE (trusty was released [1:7.2.2.dfsg.2-6ubuntu3])
utopic_ircd-hybrid: released (1:7.2.2.dfsg.2-6ubuntu3)
vivid_ircd-hybrid: released (1:7.2.2.dfsg.2-6ubuntu3)
vivid/stable-phone-overlay_ircd-hybrid: DNE
vivid/ubuntu-core_ircd-hybrid: DNE
wily_ircd-hybrid: released (1:7.2.2.dfsg.2-6ubuntu3)
xenial_ircd-hybrid: released (1:7.2.2.dfsg.2-6ubuntu3)
yakkety_ircd-hybrid: released (1:7.2.2.dfsg.2-6ubuntu3)
zesty_ircd-hybrid: released (1:7.2.2.dfsg.2-6ubuntu3)
artful_ircd-hybrid: released (1:7.2.2.dfsg.2-6ubuntu3)
bionic_ircd-hybrid: released (1:7.2.2.dfsg.2-6ubuntu3)
cosmic_ircd-hybrid: released (1:7.2.2.dfsg.2-6ubuntu3)
devel_ircd-hybrid: released (1:7.2.2.dfsg.2-6ubuntu3)

Patches_oftc-hybrid:
upstream_oftc-hybrid: needs-triage
dapper_oftc-hybrid: DNE
hardy_oftc-hybrid: ignored (reached end-of-life)
intrepid_oftc-hybrid: ignored (reached end-of-life)
jaunty_oftc-hybrid: ignored (reached end-of-life)
karmic_oftc-hybrid: ignored (reached end-of-life)
lucid_oftc-hybrid: ignored (reached end-of-life)
maverick_oftc-hybrid: ignored (reached end-of-life)
natty_oftc-hybrid: ignored (reached end-of-life)
oneiric_oftc-hybrid: ignored (reached end-of-life)
precise_oftc-hybrid: ignored (reached end-of-life)
precise/esm_oftc-hybrid: DNE (precise was needs-triage)
quantal_oftc-hybrid: ignored (reached end-of-life)
raring_oftc-hybrid: ignored (reached end-of-life)
saucy_oftc-hybrid: DNE
trusty_oftc-hybrid: DNE
trusty/esm_oftc-hybrid: DNE
utopic_oftc-hybrid: DNE
vivid_oftc-hybrid: DNE
vivid/stable-phone-overlay_oftc-hybrid: DNE
vivid/ubuntu-core_oftc-hybrid: DNE
wily_oftc-hybrid: DNE
xenial_oftc-hybrid: DNE
yakkety_oftc-hybrid: DNE
zesty_oftc-hybrid: DNE
artful_oftc-hybrid: DNE
bionic_oftc-hybrid: DNE
cosmic_oftc-hybrid: DNE
devel_oftc-hybrid: DNE

Patches_ircd-ratbox:
upstream_ircd-ratbox: released (3.0.6.dfsg-1)
dapper_ircd-ratbox: DNE
hardy_ircd-ratbox: ignored (reached end-of-life)
intrepid_ircd-ratbox: ignored (reached end-of-life)
jaunty_ircd-ratbox: ignored (reached end-of-life)
karmic_ircd-ratbox: ignored (reached end-of-life)
lucid_ircd-ratbox: ignored (reached end-of-life)
maverick_ircd-ratbox: ignored (reached end-of-life)
natty_ircd-ratbox: ignored (reached end-of-life)
oneiric_ircd-ratbox: ignored (reached end-of-life)
precise_ircd-ratbox: ignored (reached end-of-life)
precise/esm_ircd-ratbox: DNE (precise was needs-triage)
quantal_ircd-ratbox: ignored (reached end-of-life)
raring_ircd-ratbox: ignored (reached end-of-life)
saucy_ircd-ratbox: ignored (reached end-of-life)
trusty_ircd-ratbox: not-affected (3.0.8.dfsg-1)
trusty/esm_ircd-ratbox: DNE (trusty was not-affected [3.0.8.dfsg-1])
utopic_ircd-ratbox: ignored (reached end-of-life)
vivid_ircd-ratbox: ignored (reached end-of-life)
vivid/stable-phone-overlay_ircd-ratbox: DNE
vivid/ubuntu-core_ircd-ratbox: DNE
wily_ircd-ratbox: ignored (reached end-of-life)
xenial_ircd-ratbox: DNE
yakkety_ircd-ratbox: DNE
zesty_ircd-ratbox: DNE
artful_ircd-ratbox: DNE
bionic_ircd-ratbox: DNE
cosmic_ircd-ratbox: DNE
devel_ircd-ratbox: DNE