CVE-2014-1690

The vulnerability CVE-2014-1690 affects the Linux kernel’s net/netfilter/nf_nat_irc.c before 3.12.8. An IRC DCC session with incorrect NAT mangle data can allow a remote attacker to read kernel memory. Impact is information disclosure; exploitation context is remote over the network. The fixed ve...

CVE-2014-1690

The help function in net/netfilter/nfnatirc.c in the Linux kernel before 3.12.8 allows remote attackers to obtain sensitive information from kernel memory by establishing an IRC DCC session in which incorrect packet data is transmitted during use of the NAT mangle feature...

PT-2014-4293 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 3.12.8 Description: The issue allows remote attackers to obtain sensitive information from kernel memory. This is achieved by establishing an IRC DCC session where incorrect packet data is transmitted during the...

[SECURITY] Fedora 18 Update: znc-1.2-0.1.alpha1.fc18

ZNC is an IRC bouncer with many advanced features like detaching, multiple users, per channel playback buffer, SSL, IPv6, transparent DCC bouncing, Perl and C++ module support to name a few...

[SECURITY] Fedora 19 Update: znc-1.2-0.1.alpha1.fc19

ZNC is an IRC bouncer with many advanced features like detaching, multiple users, per channel playback buffer, SSL, IPv6, transparent DCC bouncing, Perl and C++ module support to name a few...

[SECURITY] Fedora 16 Update: znc-0.204-3.fc16

ZNC is an IRC bouncer with many advanced features like detaching, multiple users, per channel playback buffer, SSL, IPv6, transparent DCC bouncing, Perl and C++ module support to name a few...

[SECURITY] Fedora 14 Update: znc-0.093-2.svn2101.fc14

ZNC is an IRC bouncer with many advanced features like detaching, multiple users, per channel playback buffer, SSL, IPv6, transparent DCC bouncing, Perl and C++ module support to name a few...

KVIrc 4.0 - '\r' Carriage Return in DCC Handshake Remote Command Execution

source: https://www.securityfocus.com/bid/42026/info KVIrc is prone to a remote command-execution vulnerability because the application fails to sufficiently sanitize user-supplied input. Exploiting this issue can allow an attacker to execute arbitrary commands within the context of the affected...

FreeBSD Ports: kvirc, kvirc-devel

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2010 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

D-Link DCC Protocol Security Bypass

The remote D-link Click 'n Connect Daemon does not implement any authentication and therefore allows remote attackers to view configuration and control server functions via the affected service. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid47606; scriptversion"1.6"...

FreeBSD : kvirc -- multiple vulnerabilities (8685d412-8468-11df-8d45-001d7d9eb79a)

Two security vulnerabilities have been discovered : Multiple format string vulnerabilities in the DCC functionality in KVIrc 3.4 and 4.0 have unspecified impact and remote attack vectors. Directory traversal vulnerability in the DCC functionality in KVIrc 3.4 and 4.0 allows remote attackers to...

Fedora 12 : konversation-1.2.3-1.fc12 (2010-1935)

Update to version 1.2.3, which fixes remote crash caused by a message containing invalid Unicode characters. If the message triggers a KNotify notification, invalid Unicode string is sent over D-Bus, resulting in application crash. Apart from that, the earlier update to 1.2.2 included lots of fix...

Fedora 11 : konversation-1.2.3-1.fc11 (2010-1883)

Update to version 1.2.3, which fixes remote crash caused by a message containing invalid Unicode characters. If the message triggers a KNotify notification, invalid Unicode string is sent over D-Bus, resulting in application crash. Apart from that, the earlier update to 1.2.2 included lots of fix...

CVE-2010-2451

Multiple format string vulnerabilities in the DCC functionality in KVIrc 3.4 and 4.0 have unspecified impact and remote attack vectors...

DEBIAN-CVE-2010-2451

Multiple format string vulnerabilities in the DCC functionality in KVIrc 3.4 and 4.0 have unspecified impact and remote attack vectors...

CVE-2010-2452

Directory traversal vulnerability in the DCC functionality in KVIrc 3.4 and 4.0 allows remote attackers to overwrite arbitrary files via unknown vectors...

CVE-2010-2451

Multiple format string vulnerabilities in the DCC functionality in KVIrc 3.4 and 4.0 have unspecified impact and remote attack vectors...

Format string

Multiple format string vulnerabilities in the DCC functionality in KVIrc 3.4 and 4.0 have unspecified impact and remote attack vectors...

CVE-2010-2451

Multiple format string vulnerabilities in the DCC functionality in KVIrc 3.4 and 4.0 have unspecified impact and remote attack vectors...

CVE-2010-2451

KVIrc (DCC) has multiple vulnerabilities tracked as CVE-2010-2451 and CVE-2010-2452 in the DCC functionality of KVIrc 3.x/4.x. The issues are described as remotely exploitable format-string vulnerabilities (and, per GLSA, a directory-traversal issue) that could allow remote attackers to execute a...