Re: [ngIRCd-ML] "MODE #CHANNEL +b !" can crash the ircd ...

Am 02.01.2012 um 23:03 schrieb Christoph Biedl:

Cahata wrote...

...

"MODE #CHANNEL +b !" can crash the ircd ...

Besides the fact I could not reproduce this on several ngircd installations - I'm not very happy to see something that could be some kind of exploit code published without a prior warning. This is not responsible disclosure. If it would work, it would allow evildoers to shut down any public accessible ngircd running.

Christoph

I can reproduce it, but only with current GIT master branch. Most probably the affected code has been committed after ngIRCd release 18, so it is code that has never been released.

I’ll investigate further and keep you informed.

Regards Alex