CVE-2003-0478

published 2003-08-07

CVE-2003-0478: Format string vulnerability in (1) Bahamut IRCd 1.4.35 and earlier, and other IRC daemons based on Bahamut including (2) digatech 1.2.1, (3) methane 0.1.1, (4)…

Priority P3 40 critical 10 CVSS 2.0

AV N AC L Au N C C I C A C

EXPLOIT

Format string vulnerability in (1) Bahamut IRCd 1.4.35 and earlier, and other IRC daemons based on Bahamut including (2) digatech 1.2.1, (3) methane 0.1.1, (4) AndromedeIRCd 1.2.3-Release, and (5) ircd-RU, when running in debug mode, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a request containing format strings.

Affected

4 ranges

Vendor	Product	Version range	Fixed in
andromede	adromedeircd	—	—
bahamut	ircd	<= 1.4.35	—
daniel_moss	methane	—	—
hans_westerhof	digatech	—	—

CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.