CVE-2010-3071

Description

bip before 0.8.6 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an empty USER command.

Affected Platforms

Weakness Type

NVD-CWE-Other

References

• http://bip.t1r.net/
• http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=595409
• http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052992.ht…
• http://secunia.com/advisories/42889
• http://www.openwall.com/lists/oss-security/2010/09/05/1
• http://www.openwall.com/lists/oss-security/2010/09/07/6