BitchX 1.0c19 Local Root Exploit (suid?)

No description provided by source. // BitchX local-root by Sha0 version 1.0c19 e inferiores -todas- // este exploit se lo dedico a mi chica. // 0xC0000000-4-strlenargv1-1-strlenbuffer // 2052 to the ret include stdio.h include string.h include stdlib.h include unistd.h char payload69; char sha0co...

BitchX 1.0c19 - Local Privilege Escalation

BitchX 1.0c19 - Local Privilege Escalation // BitchX local-root by Sha0 version 1.0c19 e inferiores -todas- // este exploit se lo dedico a mi chica. // 0xC0000000-4-strlenargv1-1-strlenbuffer // 2052 to the ret include include include include char payload69; char sha0code = "\xeb\x16\x5b\x31\xc0"...

BitchX 1.0c19 - Local Privilege Escalation

// BitchX local-root by Sha0 version 1.0c19 e inferiores -todas- // este exploit se lo dedico a mi chica. // 0xC0000000-4-strlenargv1-1-strlenbuffer // 2052 to the ret include include include include char payload69; char sha0code = "\xeb\x16\x5b\x31\xc0" "\x50\x53\xb0\x0b\x89"...

Debian DSA-306-1 : ircii-pana - buffer overflows, integer overflow

Timo Sirainen discovered several problems in BitchX, a popular client for Internet Relay Chat IRC. A malicious server could craft special reply strings, triggering the client to write beyond buffer boundaries or allocate a negative amount of memory. This could lead to a denial of service if the...

BitchX IRC Client Malformed RPL_NAMEREPLY Message DoS

Binary data 1857.prm...

BitchX IRC Client Channel Mode Change DoS

Binary data 1860.prm...

BitchX Trojaned Distribution Authentication Bypass

Binary data 1859.prm...

BitchX IRC Client DNS Response Remote Overflow

Binary data 1856.prm...

BitchX IRC Client "/INVITE" Command Format String DoS

Binary data 1855.prm...

Mandrake Linux Security Advisory : BitchX (MDKSA-2003:069)

A Denial Of Service DoS vulnerability was discovered in BitchX that would allow a remote attacker to crash BitchX by changing certain channel modes. This vulnerability has been fixed in CVS and patched in the released updates. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive...

CVE-2003-1450

BitchX 75p3 and 1.0c16 through 1.0c20cvs allows remote attackers to cause a denial of service segmentation fault via a malformed RPLNAMREPLY numeric 353 message...

CVE-2003-0321

Multiple buffer overflows in BitchX IRC client 1.0-0c19 and earlier allow remote malicious IRC servers to cause a denial of service crash and possibly execute arbitrary code via long hostnames, nicknames, or channel names, which are not properly handled by the functions 1 sendctcp, 2...

CVE-2003-0322

Integer overflow in BitchX IRC client 1.0-0c19 and earlier allows remote malicious IRC servers to cause a denial of service crash...

CVE-2003-0334

BitchX IRC client 1.0c20cvs and earlier allows attackers to cause a denial of service core dump via certain channel mode changes that are not properly handled in names.c...

CVE-2003-0334

The CVE-2003-0334 issue affects BitchX IRC client versions 1.0c20cvs and earlier. A DoS (core dump) can be triggered by certain channel mode changes that are not properly handled in names.c. The Mandrake advisory notes the vulnerability was fixed in CVS and patched in released updates. Practicall...

CVE-2003-0334: Undefined Security Weakness

BitchX IRC client 1.0c20cvs and earlier allows attackers to cause a denial of service core dump via certain channel mode changes that are not properly handled in names.c...

CVE-2003-0321

Multiple buffer overflows in BitchX IRC client 1.0-0c19 and earlier allow remote malicious IRC servers to cause a denial of service crash and possibly execute arbitrary code via long hostnames, nicknames, or channel names, which are not properly handled by the functions 1 sendctcp, 2...

CVE-2003-0322

Integer overflow in BitchX IRC client 1.0-0c19 and earlier allows remote malicious IRC servers to cause a denial of service crash...

CVE-2003-0321

CVE-2003-0321 affects BitchX IRC client up to version 1.0-0c19 and earlier. The vulnerability stems from multiple buffer overflows in core parsing/handling paths (send_ctcp, cannot_join_channel, cluster, BX_compress_modes, handle_oper_vision, ban_it) when processing long hostnames, nicknames, or ...

CVE-2003-0322

CVE-2003-0322 describes an integer overflow in BitchX IRC client 1.0-0c19 and earlier that allows a remote, malicious IRC server to crash the client (DoS). Affected software: BitchX (IRC client) prior to 1.0-0c19. Root cause: integer overflow when processing certain server replies, leading to a d...