CVE-2002-1486
8.7 High
AI Score
Confidence
High
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.023 Low
EPSS
Percentile
89.6%
Multiple buffer overflows in the IRC component of Trillian 0.73 and 0.74 allows remote malicious IRC servers to cause a denial of service and possibly execute arbitrary code via (1) a large response from the server, (2) a JOIN with a long channel name, (3) a long “raw 221” message, (4) a PRIVMSG with a long nickname, or (5) a long response from an IDENT server.
References
archives.neohapsis.com/archives/bugtraq/2002-09/0258.html
archives.neohapsis.com/archives/bugtraq/2002-09/0266.html
archives.neohapsis.com/archives/bugtraq/2002-09/0268.html
archives.neohapsis.com/archives/ntbugtraq/2002-q3/0139.html
archives.neohapsis.com/archives/ntbugtraq/2002-q3/0140.html
www.iss.net/security_center/static/10150.php
www.iss.net/security_center/static/10151.php
www.iss.net/security_center/static/10163.php
www.securityfocus.com/bid/5765
www.securityfocus.com/bid/5769
www.securityfocus.com/bid/5777
8.7 High
AI Score
Confidence
High
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.023 Low
EPSS
Percentile
89.6%