Wee Enhanced Environment for Chat (WeeChat) 0.2.6 allows remote attackers to cause a denial of service (crash) via an IRC PRIVMSG command containing crafted color codes that trigger an out-of-bounds read.

- Thu Mar 19 2009 Paul P. Komkoff Jr <i at stingr.net> -     0.2.6.1-1

    - fix bz#490709

    - Wed Feb 25 2009 Fedora Release Engineering <rel-eng at       lists.fedoraproject.org> - 0.2.6-7

    - Rebuilt for       https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild

    - Sun Nov 30 2008 Ignacio Vazquez-Abrams       <ivazqueznet+rpm at gmail.com> - 0.2.6-6

    - Rebuild for Python 2.6

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote host is affected by the vulnerability described in GLSA-200904-04 (WeeChat: Denial of Service)

    Sebastien Helleu reported an array out-of-bounds error in the colored     message handling.
  Impact :

    A remote attacker could send a specially crafted PRIVMSG command,     possibly leading to a Denial of Service (application crash).
  Workaround :

    There is no known workaround at this time.

- Thu Mar 19 2009 Paul P. Komkoff Jr <i at stingr.net> -     0.2.6.1-1

    - fix bz#490709

    - Wed Feb 25 2009 Fedora Release Engineering <rel-eng at       lists.fedoraproject.org> - 0.2.6-7

    - Rebuilt for       https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild

    - Sun Nov 30 2008 Ignacio Vazquez-Abrams       <ivazqueznet+rpm at gmail.com> - 0.2.6-6

    - Rebuild for Python 2.6

    - Sun Sep 21 2008 Ville Skytta <ville.skytta at iki.fi>
      - 0.2.6-5

    - Fix Patch0:/%patch mismatch.

    - Fri Jun 27 2008 Paul P. Komkoff Jr <i at stingr.net> -       0.2.6-4

    - rebuild because of ssl/tls deps

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Sebastien Helleu discovered that an error in the handling of color codes in the weechat IRC client could cause an out-of-bounds read of an internal color array. This can be used by an attacker to crash user clients via a crafted PRIVMSG command.

The weechat version in the oldstable distribution (etch) is not affected by this problem.

ID	Name	Product	Family	Severity
36233	Fedora 10 : weechat-0.2.6.1-1.fc10 (2009-2859)	Nessus	Fedora Local Security Checks	medium
36092	GLSA-200904-04 : WeeChat: Denial of Service	Nessus	Gentoo Local Security Checks	medium
35981	Fedora 9 : weechat-0.2.6.1-1.fc9 (2009-2861)	Nessus	Fedora Local Security Checks	medium
35958	Debian DSA-1744-1 : weechat - missing input sanitization	Nessus	Debian Local Security Checks	medium

Detections

Analytics

CVE-2009-0661

high

Tenable Plugins

medium

medium

medium

medium