CVE-2010-2448

Severity Score

3.5

*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

znc.cpp in ZNC before 0.092 allows remote authenticated users to cause a denial of service (crash) by requesting traffic statistics when there is an active unauthenticated connection, which triggers a NULL pointer dereference, as demonstrated using (1) a traffic link in the web administration pages or (2) the traffic command in the /znc shell.

znc.cpp en ZNC antes de v0.092 permite a los usuarios remotos autenticados causar una denegación de servicio (caida de la aplicación) al solicitar las estadísticas de tráfico cuando hay una conexión activa no autenticada, lo que desencadena una referencia a un puntero NULL, como se ha demostrado usando (1) un enlace de tráfico en la páginas web de administración o (2) el comando traffic en la shell /znc.

*Credits: N/A

CVSS Scores

NISTv2 3.5

Attack Vector

Network

Attack Complexity

Medium

Authentication

Single

Confidentiality

None

Integrity

None

Availability

Partial

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2010-06-24 CVE Reserved
2010-07-12 CVE Published
2024-09-16 CVE Updated
2024-09-17 EPSS Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CAPEC

References (11)

URL	Tag	Source
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=584929	X_refsource_confirm
http://sourceforge.net/projects/znc/files/znc/0.092/znc-0.092-changelog.txt/view	X_refsource_confirm
http://www.securityfocus.com/bid/40982	Vdb Entry
http://znc.svn.sourceforge.net/viewvc/znc/trunk/znc.cpp?r1=2025&r2=2026&pathrev=2026	X_refsource_misc

URL	Date	SRC

URL	Date	SRC
http://znc.svn.sourceforge.net/viewvc/znc?revision=2026&view=revision	2010-07-12

URL	Date	SRC
http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043000.html	2010-07-12
http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043043.html	2010-07-12
http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043044.html	2010-07-12
http://secunia.com/advisories/40523	2010-07-12
http://www.debian.org/security/2010/dsa-2069	2010-07-12
http://www.vupen.com/english/advisories/2010/1775	2010-07-12

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Znc Search vendor "Znc"		Znc Search vendor "Znc" for product "Znc"				<= 0.090 Search vendor "Znc" for product "Znc" and version " <= 0.090"		-		Affected
Znc Search vendor "Znc"		Znc Search vendor "Znc" for product "Znc"				0.034 Search vendor "Znc" for product "Znc" and version "0.034"		-		Affected
Znc Search vendor "Znc"		Znc Search vendor "Znc" for product "Znc"				0.041 Search vendor "Znc" for product "Znc" and version "0.041"		-		Affected
Znc Search vendor "Znc"		Znc Search vendor "Znc" for product "Znc"				0.043 Search vendor "Znc" for product "Znc" and version "0.043"		-		Affected
Znc Search vendor "Znc"		Znc Search vendor "Znc" for product "Znc"				0.044 Search vendor "Znc" for product "Znc" and version "0.044"		-		Affected
Znc Search vendor "Znc"		Znc Search vendor "Znc" for product "Znc"				0.045 Search vendor "Znc" for product "Znc" and version "0.045"		-		Affected
Znc Search vendor "Znc"		Znc Search vendor "Znc" for product "Znc"				0.047 Search vendor "Znc" for product "Znc" and version "0.047"		-		Affected
Znc Search vendor "Znc"		Znc Search vendor "Znc" for product "Znc"				0.050 Search vendor "Znc" for product "Znc" and version "0.050"		-		Affected
Znc Search vendor "Znc"		Znc Search vendor "Znc" for product "Znc"				0.052 Search vendor "Znc" for product "Znc" and version "0.052"		-		Affected
Znc Search vendor "Znc"		Znc Search vendor "Znc" for product "Znc"				0.054 Search vendor "Znc" for product "Znc" and version "0.054"		-		Affected
Znc Search vendor "Znc"		Znc Search vendor "Znc" for product "Znc"				0.056 Search vendor "Znc" for product "Znc" and version "0.056"		-		Affected
Znc Search vendor "Znc"		Znc Search vendor "Znc" for product "Znc"				0.058 Search vendor "Znc" for product "Znc" and version "0.058"		-		Affected
Znc Search vendor "Znc"		Znc Search vendor "Znc" for product "Znc"				0.060 Search vendor "Znc" for product "Znc" and version "0.060"		-		Affected
Znc Search vendor "Znc"		Znc Search vendor "Znc" for product "Znc"				0.062 Search vendor "Znc" for product "Znc" and version "0.062"		-		Affected
Znc Search vendor "Znc"		Znc Search vendor "Znc" for product "Znc"				0.064 Search vendor "Znc" for product "Znc" and version "0.064"		-		Affected
Znc Search vendor "Znc"		Znc Search vendor "Znc" for product "Znc"				0.066 Search vendor "Znc" for product "Znc" and version "0.066"		-		Affected
Znc Search vendor "Znc"		Znc Search vendor "Znc" for product "Znc"				0.068 Search vendor "Znc" for product "Znc" and version "0.068"		-		Affected
Znc Search vendor "Znc"		Znc Search vendor "Znc" for product "Znc"				0.070 Search vendor "Znc" for product "Znc" and version "0.070"		-		Affected
Znc Search vendor "Znc"		Znc Search vendor "Znc" for product "Znc"				0.072 Search vendor "Znc" for product "Znc" and version "0.072"		-		Affected
Znc Search vendor "Znc"		Znc Search vendor "Znc" for product "Znc"				0.074 Search vendor "Znc" for product "Znc" and version "0.074"		-		Affected
Znc Search vendor "Znc"		Znc Search vendor "Znc" for product "Znc"				0.076 Search vendor "Znc" for product "Znc" and version "0.076"		-		Affected
Znc Search vendor "Znc"		Znc Search vendor "Znc" for product "Znc"				0.078 Search vendor "Znc" for product "Znc" and version "0.078"		-		Affected
Znc Search vendor "Znc"		Znc Search vendor "Znc" for product "Znc"				0.080 Search vendor "Znc" for product "Znc" and version "0.080"		-		Affected