CVE-2005-0199
CriticalSummary
Integer underflow in the Lists_MakeMask() function in lists.c in ngIRCd before 0.8.2 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a long MODE line that causes an incorrect length calculation, which leads to a buffer overflow.
Risk Assessment
The risk for the organization includes the possibility of a remote attack leading to an IRC server crash and potential arbitrary code execution, which could compromise system integrity and availability.
Recommendation
It is recommended to immediately upgrade ngIRCd to version 0.8.2 or later, which includes a fix for this vulnerability.
Original NVD description (English source)
Integer underflow in the Lists_MakeMask() function in lists.c in ngIRCd before 0.8.2 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a long MODE line that causes an incorrect length calculation, which leads to a buffer overflow.