Advisories MDVSA-2009:126-1: eggdrop

[paul]

mod/server.mod/servmsg.c in Eggheads Eggdrop and Windrop 1.6.19 and

earlier allows remote attackers to cause a denial of service (crash)

via a crafted PRIVMSG that causes an empty string to trigger a negative

string length copy. NOTE: this issue exists because of an incorrect

fix for CVE-2007-2807 (CVE-2009-1789).

 

Update:

 

Packages for 2008.0 are being provided due to extended support for

Corporate products.