CVE-2009-1789

mod/server.mod/servmsg.c in Eggheads Eggdrop and Windrop 1.6.19 and earlier allows remote attackers to cause a denial of service (crash) via a crafted PRIVMSG that causes an empty string to trigger a negative string length copy. NOTE: this issue exists because of an incorrect fix for CVE-2007-2807.

• http://archives.neohapsis.com/archives/fulldisclosure/2009-05/0129.html
• http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=528778
• http://cvs.eggheads.org/viewvc/viewvc.cgi/eggdrop1.6/doc/Changes1.6?revision=1.20&view=markupPatch, Vendor Advisory
• http://osvdb.org/54460
• http://secunia.com/advisories/35104Vendor Advisory
• http://secunia.com/advisories/35158
• http://secunia.com/advisories/35690
• http://www.debian.org/security/2009/dsa-1826
• http://www.mandriva.com/security/advisories?name=MDVSA-2009:126
• http://www.securityfocus.com/archive/1/503574
• http://www.securityfocus.com/bid/34985
• http://www.vupen.com/english/advisories/2009/1340Patch, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/50547
• https://www.exploit-db.com/exploits/8695
• https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01333.html
• https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01337.html
• http://archives.neohapsis.com/archives/fulldisclosure/2009-05/0129.html
• http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=528778
• http://cvs.eggheads.org/viewvc/viewvc.cgi/eggdrop1.6/doc/Changes1.6?revision=1.20&view=markupPatch, Vendor Advisory
• http://osvdb.org/54460
• http://secunia.com/advisories/35104Vendor Advisory
• http://secunia.com/advisories/35158
• http://secunia.com/advisories/35690
• http://www.debian.org/security/2009/dsa-1826
• http://www.mandriva.com/security/advisories?name=MDVSA-2009:126
• http://www.securityfocus.com/archive/1/503574
• http://www.securityfocus.com/bid/34985
• http://www.vupen.com/english/advisories/2009/1340Patch, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/50547
• https://www.exploit-db.com/exploits/8695
• https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01333.html
• https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01337.html

Published

May 26, 2009

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2009-1783Multiple FRISK Software F-Prot anti-virus products, includin…
• CVE-2009-1784The AVG parsing engine 8.5 323, as used in multiple AVG anti…
• CVE-2009-1785Cross-site scripting (XSS) vulnerability in Ulteo Open Virtu…
• CVE-2009-1786The malloc subsystem in libc in IBM AIX 5.3 and 6.1 allows l…
• CVE-2009-1787Multiple SQL injection vulnerabilities in PHP Dir Submit (ak…
• CVE-2009-1788Heap-based buffer overflow in voc_read_header in libsndfile …
• CVE-2009-1790Cross-site scripting (XSS) vulnerability in CGI RESCUE Trees…
• CVE-2009-1791Heap-based buffer overflow in aiff_read_header in libsndfile…
• CVE-2009-1792The system.openURL function in StoneTrip Ston3D StandalonePl…
• CVE-2009-1796Cross-site scripting (XSS) vulnerability in Sun Java System …
• CVE-2009-1797Multiple cross-site request forgery (CSRF) vulnerabilities o…
• CVE-2009-1798Multiple cross-site scripting (XSS) vulnerabilities on the N…