ZNC 1.0 allows remote authenticated users to cause a denial of service (NULL pointer reference and crash) via a crafted request to the (1) editnetwork, (2) editchan, (3) addchan, or (4) delchan page in modules/webadmin.cpp.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Znc | Znc | 1.0 (including) | 1.0 (including) |
Znc | Ubuntu | lucid | * |
Znc | Ubuntu | raring | * |
Znc | Ubuntu | upstream | * |