CVE:CVE-2010-2448
CNNVD:CNNVD-201007-100
ZNC是一套允许用户从工作站登录到IRC服务器的IRC代理。
在ZNC 0.092之前版本的znc.cpp中存在漏洞。远程认证用户可以在激活无认证连接时借助请求流量统计导致服务拒绝(崩溃)，该漏洞触发空指针引用。
solution:Upgrade znc znc to a higher version than 0.090,0.034,0.041,0.043,0.044,0.045,0.047,0.050,0.052,0.054,0.056,0.058,0.060,0.062,0.064,0.066,0.068,0.070,0.072,0.074,0.076,0.078,0.080,and avoid the version (,0.090],0.034,0.041,0.043,0.044,0.045,0.047,0.050,0.052,0.054,0.056,0.058,0.060,0.062,0.064,0.066,0.068,0.070,0.072,0.074,0.076,0.078,0.080