CVE-2003-0478: Andromede Adromedeircd

High severity, CVSS 10.0. EPSS: 12.3% chance of exploitation in the next 30 days.

Format string vulnerability in (1) Bahamut IRCd 1.4.35 and earlier, and other IRC daemons based on Bahamut including (2) digatech 1.2.1, (3) methane 0.1.1, (4) AndromedeIRCd 1.2.3-Release, and (5) ircd-RU, when running in debug mode, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a request containing format strings.

Affected products

• Andromede Adromedeircd: version 1.2.3 only
• Bahamut Ircd: up to and including 1.4.35
• Daniel Moss Methane: version 0.1.1 only
• Hans Westerhof Digatech: version 1.2.1 only
• Wenet Ircd-Ru: any version

Published 2003-08-07. Last modified 2026-06-16.