Florian Westphal
627b0b713c
security: fix remotely triggerable crash in SSL/TLS code
...
When a server is running with SSL/TLS support compiled in,
it is trivial to crash the server by sending an MOTD request
via another server in the network.
- ONLY servers without ssl/tls support compiled in are not affected.
Disabling SSL in the configuration (no ssl listening ports, etc)
does NOT help.
- servers that are running standalone (i.e., not connected to any
other servers) are not affected, either.
This affects all ngircd releases since ngircd 13 (earlier versions
have no SSL/TLS support).
2009-05-05 10:21:20 +02:00
..
2008-10-29 22:33:03 +01:00
2008-09-13 15:10:32 +02:00
2005-08-30 13:36:32 +00:00
2009-04-21 20:58:23 +02:00
2009-04-21 20:58:23 +02:00
2009-04-21 20:58:30 +02:00
2009-04-21 20:58:23 +02:00
2008-11-11 22:03:11 +01:00
2009-04-21 20:58:23 +02:00
2009-04-21 20:58:23 +02:00
2009-04-21 20:58:30 +02:00
2008-09-23 11:47:16 +02:00
2009-02-05 23:47:28 +01:00
2008-09-13 15:08:11 +02:00
2009-04-21 21:00:43 +02:00
2009-04-21 20:58:23 +02:00
2009-05-05 10:21:20 +02:00
2009-04-21 20:58:23 +02:00
2008-12-27 23:51:52 +01:00
2006-10-06 21:23:47 +00:00
2006-10-06 21:23:47 +00:00
2008-04-03 23:20:26 +02:00
2006-12-25 22:53:52 +00:00
2009-03-07 00:13:25 +01:00
2005-03-19 18:43:48 +00:00
2009-04-21 20:58:30 +02:00
2008-05-05 18:06:43 +02:00
2009-04-21 20:58:30 +02:00
2008-05-05 18:06:43 +02:00
2009-04-21 20:58:30 +02:00
2005-03-19 18:43:48 +00:00
2008-09-23 11:53:16 +02:00
2005-03-19 18:43:48 +00:00
2009-04-21 20:58:30 +02:00
2007-08-02 10:14:26 +00:00
2009-04-22 23:15:17 +02:00
2007-11-21 12:16:33 +00:00
2009-04-21 20:58:30 +02:00
2008-09-23 11:47:17 +02:00
2009-01-20 16:49:34 +01:00
2008-05-05 18:06:43 +02:00
2008-04-19 14:11:25 +02:00
2008-04-19 14:11:25 +02:00
2009-04-21 20:58:30 +02:00
2006-08-05 09:16:21 +00:00
2008-11-13 00:22:25 +01:00
2008-07-27 15:50:51 +02:00
2008-07-27 01:23:20 +02:00
2009-03-25 20:44:40 +01:00
2009-04-21 20:58:30 +02:00
2005-06-24 19:20:56 +00:00
2009-04-26 00:30:49 +02:00
2007-11-21 12:20:32 +00:00
2009-04-21 20:58:30 +02:00
2008-01-13 16:12:49 +00:00
2006-05-10 21:24:01 +00:00
2006-05-10 21:24:01 +00:00
2009-01-10 00:54:07 +01:00
2008-05-10 21:49:51 +02:00