[BUG SUB] silc-server 1.0.2 denial of service vulnerability (continued) - silc-server

"Frank Benkstein" <[email protected]>
Newsgroups gmane.network.silc.devel
Message-ID <[email protected]>
Software: silc-server
Version: 1.0.2
Operating System: Linux
Installation: source
Severity: critical

Description:

Sorry for the inconvenience but the previous patch only fixed the issue only for standalony servers and not for routers.


How to repeat:

/connect yourserver
/join nonexistent -hmac nonexistent


Remote Environment:

unspecified


Fix:

http://bugs.gentoo.org/show_bug.cgi?id=169599#c3
_______________________________________________________________________
Info:    https://lists.silcnet.org/mailman/listinfo/silc-announce
Archive: https://lists.silcnet.org/pipermail/silc-announce
FAQ:     http://silcnet.org/support/faq/
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.