CVE:CVE-2010-3071
CNNVD:CNNVD-201010-223
bip 是一个小型的IRC代理。
bip 0.8.6之前的版本中存在未明漏洞。远程攻击者可以借助空USER命令导致拒绝服务(空指针解引用和守护程序崩溃)。
solution:Upgrade duckcorp bip to a higher version than 0.8.5,0.7.0,0.7.1,0.7.2,0.7.3,0.7.4,0.7.5,0.8.0,0.8.0:rc0,0.8.0:rc1,0.8.1,0.8.2,0.8.3,0.8.4,and avoid the version (,0.8.5],0.7.0,0.7.1,0.7.2,0.7.3,0.7.4,0.7.5,0.8.0,0.8.0:rc0,0.8.0:rc1,0.8.1,0.8.2,0.8.3,0.8.4