[SECURITY] [DSA 1848-1] New znc packages fix remote code execution

------------------------------------------------------------------------ Debian Security Advisory DSA-1848-1 [email protected] http://www.debian.org/security/ Florian Weimer August 02, 2009 http://www.debian.org/security/faq -...

Fedora 11 : znc-0.072-3.fc11 (2009-7952)

No CVE yet, one has been requested. Upgrade to 0.072 of ZNC, fixes security issue in bug 513152 An users data directory traversal flaw was found in the way ZNC used to handle file upload requests via Direct Client Connection DCC /dcc SEND messages. A remote IRC user could issue a /dcc SEND messag...

Fedora 10 : znc-0.072-3.fc10 (2009-7937)

No CVE yet, one has been requested. Upgrade to 0.072 of ZNC, fixes security issue in bug 513152 An users data directory traversal flaw was found in the way ZNC used to handle file upload requests via Direct Client Connection DCC /dcc SEND messages. A remote IRC user could issue a /dcc SEND messag...

[SECURITY] Fedora 11 Update: znc-0.072-3.fc11

ZNC is an IRC bouncer with many advanced features like detaching, multiple users, per channel playback buffer, SSL, IPv6, transparent DCC bouncing, Perl and C++ module support to name a few...

[SECURITY] Fedora 10 Update: znc-0.072-3.fc10

ZNC is an IRC bouncer with many advanced features like detaching, multiple users, per channel playback buffer, SSL, IPv6, transparent DCC bouncing, Perl and C++ module support to name a few...

CVE-2003-1508

Buffer overflow in mIRC 6.12, when the DCC get dialog window has been minimized and the user opens the minimized window, allows remote attackers to cause a denial of service crash via a long filename...

CVE-2003-1508

CVE-2003-1508 affects mIRC 6.12. A buffer overflow occurs in the DCC get dialog: if the window is minimized and a long filename is opened, it may crash the application, enabling a remote denial-of-service. The available sources (NVD, CVE List) reiterate the same description without providing expl...

CVE-2002-2271

The CVE concerns BigFun 1.51b IRC client with Direct Client Connection (DCC) enabled. A buffer overflow is triggered by a long string, allowing a remote attacker to cause a denial of service (crash). No additional technical details (versions beyond 1.51b, specific vulnerable file/byte offset, or ...

CVE-2002-2271

Buffer overflow in BigFun 1.51b IRC client, when the Direct Client Connection DCC option is used, allows remote attackers to cause a denial of service crash via a long string...

CVE-2007-5481

Distributed Checksum Clearinghouse DCC 1.3.65 allows remote attackers to cause a denial of service crash via a "SOCKS flood."...

CVE-2007-5481

Distributed Checksum Clearinghouse DCC 1.3.65 allows remote attackers to cause a denial of service crash via a "SOCKS flood."...

CVE-2007-5481

CVE-2007-5481 affects Distributed Checksum Clearinghouse (DCC) 1.3.65. The vulnerability allows remote attackers to cause a denial of service (crash) via a "SOCKS flood" over the network. The provided documents do not include exploitation details or a listed remediation/patch.

CVE-2007-3836

Format string vulnerability in HydraIRC 0.3.151 allows remote attackers to cause a denial of service via format string specifiers in certain data related to failed DCC file transfer negotiation...

Format string

Format string vulnerability in HydraIRC 0.3.151 allows remote attackers to cause a denial of service via format string specifiers in certain data related to failed DCC file transfer negotiation...

CVE-2007-3836

Format string vulnerability in HydraIRC 0.3.151 allows remote attackers to cause a denial of service via format string specifiers in certain data related to failed DCC file transfer negotiation...

Rhapsody IRC 0.28b (NICK) Multiple fs and bof vulnerability

Rhapsody IRC 0.28b NICK Multiple fs and bof vulnerability Description: Rhapsody is a text console IRC client for Unix operating systems. It is small, fast, portable, easy to use and full featured. An intuitive menu-driven user interface makes rhapsody ideal for beginner to intermediate users. Fou...

CVE-2007-1047

Unspecified vulnerability in Distributed Checksum Clearinghouse DCC before 1.3.51 allows remote attackers to delete or add hosts in /var/dcc/maps...

CVE-2007-1047

Unspecified vulnerability in Distributed Checksum Clearinghouse DCC before 1.3.51 allows remote attackers to delete or add hosts in /var/dcc/maps...

CVE-2007-1047

Unspecified vulnerability in Distributed Checksum Clearinghouse DCC before 1.3.51 allows remote attackers to delete or add hosts in /var/dcc/maps...

CVE-2007-1047

Distributed Checksum Clearinghouse (DCC) before 1.3.51 is affected by an unspecified vulnerability that enables remote attackers to delete or add hosts in /var/dcc/maps. The CVE entry notes a network-accessible impact with partial confidentiality/integrity/availability implications (CVSS2 base sc...