Unrated severityNVD Advisory· Published Feb 4, 2010· Updated Jun 16, 2026
CVE-2009-4016
CVE-2009-4016
Description
Integer underflow in the clean_string function in irc_string.c in (1) IRCD-hybrid 7.2.2 and 7.2.3, (2) ircd-ratbox before 2.2.9, and (3) oftc-hybrid before 1.6.8, when flatten_links is disabled, allows remote attackers to execute arbitrary code or cause a denial of service (daemon crash) via a LINKS command.
Affected products
77cpe:2.3:a:ircd-hybrid:ircd-hybrid:7.2.2:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:ircd-hybrid:ircd-hybrid:7.2.2:*:*:*:*:*:*:*
- cpe:2.3:a:ircd-hybrid:ircd-hybrid:7.2.3:*:*:*:*:*:*:*
- (no CPE)range: 7.2.2, 7.2.3
cpe:2.3:a:ircd-ratbox:ircd-ratbox:*:*:*:*:*:*:*:*+ 54 more
- cpe:2.3:a:ircd-ratbox:ircd-ratbox:*:*:*:*:*:*:*:*range: <=2.2.8
- cpe:2.3:a:ircd-ratbox:ircd-ratbox:1.0:*:*:*:*:*:*:*
- cpe:2.3:a:ircd-ratbox:ircd-ratbox:1.1:*:*:*:*:*:*:*
- cpe:2.3:a:ircd-ratbox:ircd-ratbox:1.1.1:*:*:*:*:*:*:*
- cpe:2.3:a:ircd-ratbox:ircd-ratbox:1.1.2:*:*:*:*:*:*:*
- cpe:2.3:a:ircd-ratbox:ircd-ratbox:1.2.1:*:*:*:*:*:*:*
- cpe:2.3:a:ircd-ratbox:ircd-ratbox:1.2.2:*:*:*:*:*:*:*
- cpe:2.3:a:ircd-ratbox:ircd-ratbox:1.2.3:*:*:*:*:*:*:*
- cpe:2.3:a:ircd-ratbox:ircd-ratbox:1.3:*:*:*:*:*:*:*
- cpe:2.3:a:ircd-ratbox:ircd-ratbox:1.3.1:*:*:*:*:*:*:*
- cpe:2.3:a:ircd-ratbox:ircd-ratbox:1.3.2:*:*:*:*:*:*:*
- cpe:2.3:a:ircd-ratbox:ircd-ratbox:1.4:*:*:*:*:*:*:*
- cpe:2.3:a:ircd-ratbox:ircd-ratbox:1.4.1:*:*:*:*:*:*:*
- cpe:2.3:a:ircd-ratbox:ircd-ratbox:1.4.2:*:*:*:*:*:*:*
- cpe:2.3:a:ircd-ratbox:ircd-ratbox:1.4:rc1:*:*:*:*:*:*
- cpe:2.3:a:ircd-ratbox:ircd-ratbox:1.4:rc2:*:*:*:*:*:*
- cpe:2.3:a:ircd-ratbox:ircd-ratbox:1.5:*:*:*:*:*:*:*
- cpe:2.3:a:ircd-ratbox:ircd-ratbox:1.5.1:*:*:*:*:*:*:*
- cpe:2.3:a:ircd-ratbox:ircd-ratbox:1.5.2:*:*:*:*:*:*:*
- cpe:2.3:a:ircd-ratbox:ircd-ratbox:1.5.3:*:*:*:*:*:*:*
- cpe:2.3:a:ircd-ratbox:ircd-ratbox:2.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:ircd-ratbox:ircd-ratbox:2.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:ircd-ratbox:ircd-ratbox:2.0.10:*:*:*:*:*:*:*
- cpe:2.3:a:ircd-ratbox:ircd-ratbox:2.0.11:*:*:*:*:*:*:*
- cpe:2.3:a:ircd-ratbox:ircd-ratbox:2.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:ircd-ratbox:ircd-ratbox:2.0.3:*:*:*:*:*:*:*
- cpe:2.3:a:ircd-ratbox:ircd-ratbox:2.0.4:*:*:*:*:*:*:*
- cpe:2.3:a:ircd-ratbox:ircd-ratbox:2.0.5:*:*:*:*:*:*:*
- cpe:2.3:a:ircd-ratbox:ircd-ratbox:2.0.6:*:*:*:*:*:*:*
- cpe:2.3:a:ircd-ratbox:ircd-ratbox:2.0.7:*:*:*:*:*:*:*
- cpe:2.3:a:ircd-ratbox:ircd-ratbox:2.0.8:*:*:*:*:*:*:*
- cpe:2.3:a:ircd-ratbox:ircd-ratbox:2.0.9:*:*:*:*:*:*:*
- cpe:2.3:a:ircd-ratbox:ircd-ratbox:2.1.0:*:*:*:*:*:*:*
- cpe:2.3:a:ircd-ratbox:ircd-ratbox:2.1.0:beta1:*:*:*:*:*:*
- cpe:2.3:a:ircd-ratbox:ircd-ratbox:2.1.0:beta2:*:*:*:*:*:*
- cpe:2.3:a:ircd-ratbox:ircd-ratbox:2.1.1:*:*:*:*:*:*:*
- cpe:2.3:a:ircd-ratbox:ircd-ratbox:2.1.2:*:*:*:*:*:*:*
- cpe:2.3:a:ircd-ratbox:ircd-ratbox:2.1.3:*:*:*:*:*:*:*
- cpe:2.3:a:ircd-ratbox:ircd-ratbox:2.1.4:*:*:*:*:*:*:*
- cpe:2.3:a:ircd-ratbox:ircd-ratbox:2.1.5:*:*:*:*:*:*:*
- cpe:2.3:a:ircd-ratbox:ircd-ratbox:2.1.6:*:*:*:*:*:*:*
- cpe:2.3:a:ircd-ratbox:ircd-ratbox:2.1.7:*:*:*:*:*:*:*
- cpe:2.3:a:ircd-ratbox:ircd-ratbox:2.1.8:*:*:*:*:*:*:*
- cpe:2.3:a:ircd-ratbox:ircd-ratbox:2.2.0:*:*:*:*:*:*:*
- cpe:2.3:a:ircd-ratbox:ircd-ratbox:2.2.0:rc1:*:*:*:*:*:*
- cpe:2.3:a:ircd-ratbox:ircd-ratbox:2.2.0:rc2:*:*:*:*:*:*
- cpe:2.3:a:ircd-ratbox:ircd-ratbox:2.2.0:rc3:*:*:*:*:*:*
- cpe:2.3:a:ircd-ratbox:ircd-ratbox:2.2.1:*:*:*:*:*:*:*
- cpe:2.3:a:ircd-ratbox:ircd-ratbox:2.2.2:*:*:*:*:*:*:*
- cpe:2.3:a:ircd-ratbox:ircd-ratbox:2.2.3:*:*:*:*:*:*:*
- cpe:2.3:a:ircd-ratbox:ircd-ratbox:2.2.4:*:*:*:*:*:*:*
- cpe:2.3:a:ircd-ratbox:ircd-ratbox:2.2.5:*:*:*:*:*:*:*
- cpe:2.3:a:ircd-ratbox:ircd-ratbox:2.2.6:*:*:*:*:*:*:*
- cpe:2.3:a:ircd-ratbox:ircd-ratbox:2.2.7:*:*:*:*:*:*:*
- (no CPE)range: <2.2.9
cpe:2.3:a:oftc:oftc-hybrid:*:*:*:*:*:*:*:*+ 17 more
- cpe:2.3:a:oftc:oftc-hybrid:*:*:*:*:*:*:*:*range: <=1.6.7
- cpe:2.3:a:oftc:oftc-hybrid:1.4.0:*:*:*:*:*:*:*
- cpe:2.3:a:oftc:oftc-hybrid:1.4.1:*:*:*:*:*:*:*
- cpe:2.3:a:oftc:oftc-hybrid:1.5.0:*:*:*:*:*:*:*
- cpe:2.3:a:oftc:oftc-hybrid:1.5.1:*:*:*:*:*:*:*
- cpe:2.3:a:oftc:oftc-hybrid:1.5.2:*:*:*:*:*:*:*
- cpe:2.3:a:oftc:oftc-hybrid:1.5.3:*:*:*:*:*:*:*
- cpe:2.3:a:oftc:oftc-hybrid:1.5.4:*:*:*:*:*:*:*
- cpe:2.3:a:oftc:oftc-hybrid:1.5.5:*:*:*:*:*:*:*
- cpe:2.3:a:oftc:oftc-hybrid:1.5.6:*:*:*:*:*:*:*
- cpe:2.3:a:oftc:oftc-hybrid:1.5.7:*:*:*:*:*:*:*
- cpe:2.3:a:oftc:oftc-hybrid:1.6.0:*:*:*:*:*:*:*
- cpe:2.3:a:oftc:oftc-hybrid:1.6.1:*:*:*:*:*:*:*
- cpe:2.3:a:oftc:oftc-hybrid:1.6.2:*:*:*:*:*:*:*
- cpe:2.3:a:oftc:oftc-hybrid:1.6.3:*:*:*:*:*:*:*
- cpe:2.3:a:oftc:oftc-hybrid:1.6.4:*:*:*:*:*:*:*
- cpe:2.3:a:oftc:oftc-hybrid:1.6.5:*:*:*:*:*:*:*
- cpe:2.3:a:oftc:oftc-hybrid:1.6.6:*:*:*:*:*:*:*
- Range: <1.6.8
Patches
Vulnerability mechanics
References
10- security.debian.org/pool/updates/main/i/ircd-hybrid/ircd-hybrid_7.2.2.dfsg.2-4+lenny1.diff.gznvdPatch
- www.debian.org/security/2010/dsa-1980nvdPatch
- secunia.com/advisories/38210nvdVendor Advisory
- secunia.com/advisories/38381nvdVendor Advisory
- secunia.com/advisories/38382nvdVendor Advisory
- secunia.com/advisories/38383nvdVendor Advisory
- lists.ratbox.org/pipermail/ircd-ratbox/2010-January/000891.htmlnvd
- svn.ircd-hybrid.org:8000/viewcvs.cginvd
- trac.oftc.net/projects/oftc-hybrid/browser/tags/oftc-hybrid-1.6.8/RELNOTESnvd
- www.securityfocus.com/bid/37978nvd
News mentions
0No linked articles in our index yet.