CVE-2005-0226

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

Format string vulnerability in the Log_Resolver function in log.c for ngIRCd 0.8.2 and earlier, when compiled with IDENT, logging to SYSLOG, and with DEBUG enabled, allows remote attackers to execute arbitrary code.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://marc.info/?l=bugtraq&m=110746413108183&w=2
http://secunia.com/advisories/14114/Exploit, Patch, Vendor Advisory
http://www.nosystem.com.ar/advisories/advisory-11.txtExploit, Patch, Vendor Advisory
http://www.securityfocus.com/bid/12434
http://marc.info/?l=bugtraq&m=110746413108183&w=2
http://secunia.com/advisories/14114/Exploit, Patch, Vendor Advisory
http://www.nosystem.com.ar/advisories/advisory-11.txtExploit, Patch, Vendor Advisory
http://www.securityfocus.com/bid/12434

Timeline

Published: Feb 3, 2005
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2005

CVE-2005-02274.3PostgreSQL (pgsql) 7.4.x, 7.2.x, and other versions allows local users to load arbitrary shared libraries and execute code via the LOAD exte CVE-2005-02295.0CitrusDB 0.3.5 and earlier stores the newfile.txt temporary data file under the web root, which allows remote attackers to steal credit card CVE-2005-02305.1Firefox 1.0 does not prevent the user from dragging an executable file to the desktop when it has an image/gif content type but has a danger CVE-2005-02312.6Firefox 1.0 does not invoke the Javascript Security Manager when a user drags a javascript: or data: URL to a tab, which allows remote attac CVE-2005-02322.6Firefox 1.0 allows remote attackers to modify Boolean configuration parameters for the about:config site by using a plugin such as Flash, an CVE-2005-02337.5The International Domain Name (IDN) support in Firefox 1.0, Camino .8.5, and Mozilla before 1.7.6 allows remote attackers to spoof domain na CVE-2005-02345.0The International Domain Name (IDN) support in Safari 1.2.5 allows remote attackers to spoof domain names using punycode encoded domain name CVE-2005-02355.0The International Domain Name (IDN) support in Opera 7.54 allows remote attackers to spoof domain names using punycode encoded domain names CVE-2005-02365.0The International Domain Name (IDN) support in Omniweb 5 allows remote attackers to spoof domain names using punycode encoded domain names t CVE-2005-02375.0The International Domain Name (IDN) support in Konqueror 3.2.1 on KDE 3.2.1 allows remote attackers to spoof domain names using punycode enc CVE-2005-02385.0The International Domain Name (IDN) support in Epiphany allows remote attackers to spoof domain names using punycode encoded domain names th CVE-2005-02397.5viewcert.php in the S/MIME plugin 0.4 and 0.5 for Squirrelmail allows remote attackers to execute arbitrary commands via shell metacharacter