CVE-2003-1000

Removed by vendor...

[Full-Disclosure] xchat 2.0.6 crashes with mirc 6.0-6.11 DCC exploit

xchat 2.0.6 crashes with mirc 6.0-6.11 DCC exploit the machine on which xchat crashed Linux 2.4.23 xchat 2.0.6 the machine who did the exploit mirc 6.12 Windows XP --- what happend: i starded xchat 2.0.6 on my linux machine and, just for fun, tried to exploit it via mirc. if you are not familiar...

Multiple mIRC bugs

Buffer overflow on processing irc:// URL, DoS on DCC processing...

XChat: malformed dcc send request denial of service

Background XChat is a multiplatform IRC client. Description There is a remotely exploitable bug in XChat 2.0.6 that could lead to a denial of service attack. Gentoo wishes to thank lloydbates for discovering this bug, as well as jcdutton and rac for submitting patches to fix the bug. Impact A...

(Fw) : mIRC 6.12 (latest) DCC Exploit

this news was found on irchelp, DCC Exploit Affecting mIRC 6.12 : another exploit was identified which can crash even the recently released version 6.12. It only seems to affect people who minimize DCC get dialog windows manually or by default, and then open those windows to get a file with an...

[EXPL] mIRC Unspecified DCC Request Vulnerability (Exploit)

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

[NT] mIRC Unspecified DCC Request Vulnerability

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

mIRC 6.1 - DCC SEND Buffer Overflow (1)

mIRC 6.1 - DCC SEND Buffer Overflow 1 source: https://www.securityfocus.com/bid/8818/info A vulnerability has been reported to exist in the mIRC client that may allow a remote attacker to crash a vulnerable mIRC client. The condition is most likely present due to insufficient boundary checking...

mIRC 6.1 - 'DCC SEND' Buffer Overflow (1)

source: https://www.securityfocus.com/bid/8818/info A vulnerability has been reported to exist in the mIRC client that may allow a remote attacker to crash a vulnerable mIRC client. The condition is most likely present due to insufficient boundary checking performed on 'DCC SEND' requests. It has...

mIRC 6.1 - 'DCC SEND' Buffer Overflow (2)

source: https://www.securityfocus.com/bid/8818/info A vulnerability has been reported to exist in the mIRC client that may allow a remote attacker to crash a vulnerable mIRC client. The condition is most likely present due to insufficient boundary checking performed on 'DCC SEND' requests. It has...

mIRC 6.1 - DCC SEND Buffer Overflow (2)

mIRC 6.1 - DCC SEND Buffer Overflow 2 source: https://www.securityfocus.com/bid/8818/info A vulnerability has been reported to exist in the mIRC client that may allow a remote attacker to crash a vulnerable mIRC client. The condition is most likely present due to insufficient boundary checking...

CVE-2002-0425

The CVE affects mIRC DCC server protocol. The vulnerability allows remote attackers to access sensitive information, specifically alternate IRC nicknames, via a "100 testing" message in a DCC connection request that the user cannot ignore or cancel. This leads to disclosure of alternate nicknames...

CVE-2002-0425

mIRC DCC server protocol allows remote attackers to gain sensitive information such as alternate IRC nicknames via a "100 testing" message in a DCC connection request that cannot be ignored or canceled by the user, which may leak the alternate nickname in a response message...

CVE-2002-2173

Buffer overflow in the IRC module of Trillian 0.725 and 0.73 allowing remote attackers to execute arbitrary code via a long DCC Chat message...

CVE-2002-0425

mIRC DCC server protocol allows remote attackers to gain sensitive information such as alternate IRC nicknames via a "100 testing" message in a DCC connection request that cannot be ignored or canceled by the user, which may leak the alternate nickname in a response message...

CVE-2002-0060

CVE-2002-0060 affects the Linux kernel netfilter IRC DCC connection-tracking helper in 2.4.x (notably 2.4.14–2.4.18-pre8/9). The bug sets an overly broad conntrack mask, causing firewall rules to be more permissive than intended and potentially allowing inbound connections that bypass restriction...

mIRC DCC Server Security Flaw

Good afternoon, There is an error in the impmelentation of the mIRC DCC server protocol. This venerability allows an attacker to obtain: 1 The victim's nickname. 2 Whether or not the victim is ignoring the attackers requests for a direct connection. 3 Information regarding the number of IRC serve...

CVE-2001-1056

IRC DCC helper in the ipmasqirc IP masquerading module 2.2 allows remote attackers to bypass intended firewall restrictions by causing the target system to send a "DCC SEND" request to a malicious server which listens on port 6667, which may cause the module to believe that the traffic is a valid...

CVE-2001-1056

The CVE affects the ip_masq_irc IP masquerading module 2.2. A remote attacker can bypass firewall restrictions by inducing the target to send a DCC SEND to a malicious server listening on port 6667, which may cause the module to treat that traffic as valid and permit the connection to the port sp...

CVE-1999-1351

Directory traversal vulnerability in KVIrc IRC client 0.9.0 with the "Listen to !nick requests" option enabled allows remote attackers to read arbitrary files via a .. dot dot in a DCC GET request...