Vyatta – Linux & Open Source Alternative to Cisco – Advanced Routing, Firewall, VPN, QoS..
Free Download ->

LK2008: Embedded and Mobile Linux

LK2008: The values of the Linux community

LWN.net Weekly Edition for October 9, 2008

LWN.net Weekly Edition for October 2, 2008

Weekly edition	Kernel	Security	Distributions	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ

IRC Services: denial of service

Package(s):

ircservices

CVE #(s):

CVE-2007-6122

Created:

December 14, 2007

Updated:

December 19, 2007

Description:

loverboy reported that the "default_encrypt()" function in file encrypt.c does not properly handle overly long passwords. A remote attacker could provide an overly long password to the vulnerable server, resulting in a denial of service.

Alerts:

Gentoo

200712-12

2007-12-13

(Log in to post comments)