CVE-2010-2448

Published Jul 12, 2010

Last updated 14 years ago

Overview

Description: znc.cpp in ZNC before 0.092 allows remote authenticated users to cause a denial of service (crash) by requesting traffic statistics when there is an active unauthenticated connection, which triggers a NULL pointer dereference, as demonstrated using (1) a traffic link in the web administration pages or (2) the traffic command in the /znc shell.
Source: cve@mitre.org
NVD status: Analyzed

Hype score: Not currently trending

Risk scores

CVSS 2.0

Type: Primary
Base score: 3.5
Impact score: 2.9
Exploitability score: 6.8
Vector string: AV:N/AC:M/Au:S/C:N/I:N/A:P

Weaknesses

nvd@nist.gov: NVD-CWE-Other

Evaluator

Comment: Per: http://cwe.mitre.org/data/definitions/476.html 'CWE-476: NULL Pointer Dereference'
Impact: -
Solution: -

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:znc:znc:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "3A23F341-516C-482C-814F-560E7E346F4C",
            "versionEndIncluding": "0.090"
          },
          {
            "criteria": "cpe:2.3:a:znc:znc:0.034:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "CAABF9A2-241D-40DC-A7D9-6864AC3CC6AE"
          },
          {
            "criteria": "cpe:2.3:a:znc:znc:0.041:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "4B15AC84-9EC6-4558-A445-F4085659B4F7"
          },
          {
            "criteria": "cpe:2.3:a:znc:znc:0.043:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "9CE21062-0BFC-476A-B616-15B7DF79A895"
          },
          {
            "criteria": "cpe:2.3:a:znc:znc:0.044:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "0C012D55-9039-4D68-9CA0-5624ADEF583F"
          },
          {
            "criteria": "cpe:2.3:a:znc:znc:0.045:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "0C185E34-735D-4839-8C05-B46CE7028765"
          },
          {
            "criteria": "cpe:2.3:a:znc:znc:0.047:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "60AEE9F9-78B7-40B4-B28A-1B8F068CA953"
          },
          {
            "criteria": "cpe:2.3:a:znc:znc:0.050:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "453B05F9-C630-4329-BE91-8EEA6B0C47D9"
          },
          {
            "criteria": "cpe:2.3:a:znc:znc:0.052:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "4AECFB9F-9630-438F-9BE4-E4A44A5023FB"
          },
          {
            "criteria": "cpe:2.3:a:znc:znc:0.054:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "CA564C01-2757-479C-9E33-2D7F0890C61C"
          },
          {
            "criteria": "cpe:2.3:a:znc:znc:0.056:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "1BFE27D3-487B-41A2-A6CE-AA36E07506BE"
          },
          {
            "criteria": "cpe:2.3:a:znc:znc:0.058:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "13E7CC41-1923-4295-8AFC-8D295FDD9C5D"
          },
          {
            "criteria": "cpe:2.3:a:znc:znc:0.060:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "3C2127D9-936F-4E71-BB78-02DE61FF44C6"
          },
          {
            "criteria": "cpe:2.3:a:znc:znc:0.062:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "89151E35-63D2-440E-AD2F-A2BAECA6884B"
          },
          {
            "criteria": "cpe:2.3:a:znc:znc:0.064:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "952BC3B5-4D07-4C61-B3FE-650FBC699B8F"
          },
          {
            "criteria": "cpe:2.3:a:znc:znc:0.066:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "9983141A-3B1F-41EE-809A-0F435EC067C2"
          },
          {
            "criteria": "cpe:2.3:a:znc:znc:0.068:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "6A505A45-4404-4E0E-97AD-69D9C5D280DC"
          },
          {
            "criteria": "cpe:2.3:a:znc:znc:0.070:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "8AB8B51F-4FD7-463B-9E8B-6846E7E690A5"
          },
          {
            "criteria": "cpe:2.3:a:znc:znc:0.072:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "0BCA1336-CE79-4193-89AA-0AA9C399AF7D"
          },
          {
            "criteria": "cpe:2.3:a:znc:znc:0.074:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "41FA061E-155D-4F9F-BFE0-956AEAF977D3"
          },
          {
            "criteria": "cpe:2.3:a:znc:znc:0.076:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "5FCDF1C4-C831-4BC4-91AA-9DF027E9FC75"
          },
          {
            "criteria": "cpe:2.3:a:znc:znc:0.078:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "6C19FD33-9192-4EC2-B68F-4B49D859E627"
          },
          {
            "criteria": "cpe:2.3:a:znc:znc:0.080:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "3209D93B-9DD2-49CE-9C3C-AD8573E4F1DA"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

Overview

Social media

Risk scores

CVSS 2.0

Weaknesses

Evaluator

Configurations

References