Multiple off-by-one errors in VooDoo cIRCle before 1.1.beta27 allow remote...

7.5 CVSS

Vulnerability Description

Multiple off-by-one errors in VooDoo cIRCle before 1.1.beta27 allow remote attackers to cause a denial of service (connection loss) or possibly execute arbitrary code via a (1) DNS name response of the exact length as a buffer; or a long (2) channel name, (3) partyline channel name, or unspecified vectors in crafted BOTNET packets.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2007-2651

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

More from voodoo circle

View All →

CVE-2005-1326

Buffer overflow in VooDoo cIRCle BOTNET before 1.0.33 allows remote...

Medium 5

Affected Vendor

voodoo circle

View all reports →

Affected Software

voodoo circle

Vulnerable Versions:

1.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4, 1.0.5, 1.0.6, 1.0.7, 1.0.8, 1.0.9, 1.0.10, 1.0.11, 1.0.12, 1.0.13, 1.0.14, 1.0.15, 1.0.16, 1.0.18, 1.0.19, 1.0.20, 1.0.21, 1.0.22, 1.0.23, 1.0.24, 1.0.25, 1.0.26, 1.0.27, 1.0.28, 1.0.29, 1.0.30, 1.0.31, 1.0.32, 1.0.33, 1.0.34, 1.0.35, 1.0.36, 1.0.37, 1.0.38, 1.0.39, 1.0.40, 1.0.41, 1.0.42, 1.0.43, 1.0.44, 1.0.45, 1.0.46, 1.0.47, 1.0.48, 1.0.49, 1.0.50, 1.0.51, 1.0.52, 1.0.53, 1.0.54, 1.0.55, 1.0.56, 1.0.57, 1.0.58, 1.0.59, 1.0.60, 1.1.beta0, 1.1.beta1, 1.1.beta2, 1.1.beta3, 1.1.beta4, 1.1.beta5, 1.1.beta6, 1.1.beta7, 1.1.beta8, 1.1.beta9, 1.1.beta10, 1.1.beta11, 1.1.beta12, 1.1.beta13, 1.1.beta14, 1.1.beta15, 1.1.beta16, 1.1.beta17, 1.1.beta18, 1.1.beta19, 1.1.beta20, 1.1.beta21, 1.1.beta22, 1.1.beta23, 1.1.beta24, 1.1.beta25, 1.1.beta26

Timeline

Official Publish: May 14th, 2007

Last Modified: August 7th, 2024

Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.