CVE-2006-4126: Dconnect Daemon

Medium severity, CVSS 5.0. EPSS: 9% chance of exploitation in the next 30 days.

The dc_chat function in cmd.dc.c in DConnect Daemon 0.7.0 and earlier allows remote attackers to cause a denial of service (application crash) by sending a client message before providing the nickname, which triggers a null pointer dereference.

Affected products

• Dconnect Dconnect Daemon: version 0.0.2 only; version 0.0.3 only; version 0.7.0 only

Published 2006-08-14. Last modified 2026-06-16.