Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2010-2448

znc.cpp in ZNC before 0.092 allows remote authenticated users to cause a denial of service (crash) by requesting traffic statistics when there is an active unauthenticated connection, which triggers a NULL pointer dereference, as demonstrated using (1) a traffic link in the web administration pages or (2) the traffic command in the /znc shell.

Published

2010-07-12T17:30:01.377

Last Modified

2025-04-11T00:51:21.963

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 3.5 (LOW)

CVSSv2 Vector

AV:N/AC:M/Au:S/C:N/I:N/A:P

  • Access Vector: NETWORK
  • Access Complexity: MEDIUM
  • Authentication: SINGLE
  • Confidentiality Impact: NONE
  • Integrity Impact: NONE
  • Availability Impact: PARTIAL
Exploitability Score

6.8

Impact Score

2.9

Weaknesses
  • Type: Primary
    NVD-CWE-Other
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application znc znc ≤ 0.090 Yes
Application znc znc 0.034 Yes
Application znc znc 0.041 Yes
Application znc znc 0.043 Yes
Application znc znc 0.044 Yes
Application znc znc 0.045 Yes
Application znc znc 0.047 Yes
Application znc znc 0.050 Yes
Application znc znc 0.052 Yes
Application znc znc 0.054 Yes
Application znc znc 0.056 Yes
Application znc znc 0.058 Yes
Application znc znc 0.060 Yes
Application znc znc 0.062 Yes
Application znc znc 0.064 Yes
Application znc znc 0.066 Yes
Application znc znc 0.068 Yes
Application znc znc 0.070 Yes
Application znc znc 0.072 Yes
Application znc znc 0.074 Yes
Application znc znc 0.076 Yes
Application znc znc 0.078 Yes
Application znc znc 0.080 Yes
References