Denial of Service Vulnerability in Eggdrop Package - CVE-2009-1789
Summary
DEBIAN-CVE-2009-1789: mod/server.mod/servmsg.c in Eggheads Eggdrop and Windrop 1.6.19 and earlier allows remote attackers to cause a denial of service (crash) via a crafted PRIVMSG that causes an empty string to trigger a negative string leng... Affects eggdrop versions < 1.6.19-1.2. Fixed in 1.6.19-1.2. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Eggdrop is an open-source Internet Relay Chat (IRC) bot that is widely used for managing IRC channels. It provides various functionalities such as user management, channel management, and scripting capabilities. However, versions 1.6.19 and earlier are vulnerable to a denial of service attack due to improper handling of certain messages, which can lead to crashes.
Vulnerability Detail
The vulnerability identified as CVE-2009-1789 exists in mod/server.mod/servmsg.c of Eggdrop and Windrop versions 1.6.19 and earlier. It allows remote attackers to exploit a crafted PRIVMSG that triggers a negative string length copy, resulting in a denial of service through a crash. This issue arises from an incorrect fix for a previous vulnerability (CVE-2007-2807), making it critical for users to address.
How To Fix
Minimum fixed version
1.6.19-1.2
This is the first release that contains the fix.
sudo apt-get install --only-upgrade eggdropTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users can restrict access to their Eggdrop bot by limiting the users who can send PRIVMSG commands or by implementing firewall rules to block untrusted sources from connecting to the bot.
Conclusion
CVE-2009-1789 is a significant vulnerability in the Eggdrop IRC bot that can lead to denial of service attacks. Users are strongly advised to update to the patched version to mitigate risks. Temporary workarounds can be implemented while awaiting updates.
See every vulnerability recorded for eggdrop →
FAQ
CVE-2009-1789 is a vulnerability in the Eggdrop IRC bot that allows remote attackers to cause a denial of service via crafted messages.
Eggdrop versions 1.6.19 and earlier are affected by this vulnerability.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without any signup.
If you cannot update, consider implementing access restrictions or firewall rules as a temporary workaround.
For more information on vulnerabilities and how to monitor them, you can visit Vulert, which uses manifest files to alert users about open-source vulnerabilities.
References
Related vulnerabilities
Recent vulnerabilities recorded for eggdrop.
