CVE-2003-0478: Format string vulnerability in (1) Bahamut IRCd 1.4.35 and earlier, and other IRC daemons based on Bahamut...

Security readout for executives and security teams

This is an old IRC server vulnerability affecting Bahamut IRCd and several Bahamut-derived daemons when debug mode is enabled. A remote attacker could crash the service and may be able to run code. Business urgency depends on whether legacy IRC infrastructure is still exposed. Exposure is most likely in legacy IRC services running Bahamut IRCd or named derivatives with debug mode enabled, especially if reachable from the internet. Modern environments without these daemons are unlikely to be affected. Prioritize this if the organization still operates legacy IRC infrastructure. Internet-facing affected daemons should be handled urgently because remote denial of service is documented and code execution is possible. Mitigation focus: Inventory IRC daemons and identify Bahamut-based software and versions.; Disable debug mode on any affected or uncertain Bahamut-derived daemon.; Restrict external access to IRC services that do not require public exposure..

Prepared

Jun 30, 2026, 10:00 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.