Description
The logging capability in muh 2.05d IRC server does not properly cleanse user-injected format strings, which allows remote attackers to cause a denial of service or execute arbitrary commands via a malformed nickname.
References
- muh-log-dos(5215) vdb-entry
- 20000909 format string bug in muh mailing-list
- 1665 vdb-entry
- 20000909 Re: format string bug in muh mailing-list