CVE-2014-2905

fish aka fish-shell 1.16.0 before 2.1.1 does not properly check the credentials, which allows local users to gain privileges via the universal variable socket, related to /tmp/fishd.socket.user permissions...

CVE-2014-2905

fish aka fish-shell 1.16.0 before 2.1.1 does not properly check the credentials, which allows local users to gain privileges via the universal variable socket, related to /tmp/fishd.socket.user permissions...

CVE-2014-2905: Undefined Security Weakness

fish aka fish-shell 1.16.0 before 2.1.1 does not properly check the credentials, which allows local users to gain privileges via the universal variable socket, related to /tmp/fishd.socket.user permissions...

CVE-2013-7049

Stack-based buffer overflow in fish.cpp in the Fish plugin for ZNC, as used in ZNC for Windows znc-msvc 0.206 and earlier, allows remote attackers to cause a denial of service crash via a long string in a DH1080INIT message...

Stack overflow

Stack-based buffer overflow in fish.cpp in the Fish plugin for ZNC, as used in ZNC for Windows znc-msvc 0.206 and earlier, allows remote attackers to cause a denial of service crash via a long string in a DH1080INIT message...

CVE-2013-7049

Stack-based buffer overflow in fish.cpp in the Fish plugin for ZNC, as used in ZNC for Windows znc-msvc 0.206 and earlier, allows remote attackers to cause a denial of service crash via a long string in a DH1080INIT message...

CVE-2013-7049

CVE-2013-7049 describes a stack-based buffer overflow in the Fish plugin’s fish.cpp for ZNC (Windows/znc-msvc) version 0.206 and earlier. The vulnerability occurs when parsing a DH1080_INIT message, where insufficient bounds checking allows an attacker-supplied long string to overflow the raw_buf...

CVE-2013-7049: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in fish.cpp in the Fish plugin for ZNC, as used in ZNC for Windows znc-msvc 0.206 and earlier, allows remote attackers to cause a denial of service crash via a long string in a DH1080INIT message...

ZNC IRC Bouncer Fish插件远程拒绝服务漏洞

Bugtraq ID:64254 CVE ID:CVE-2013-7049 ZNC是一个IRC代理，允许用户从工作站登录到IRC服务器。 ZNC IRC Bouncer Fish插件fish.cpp在初始化新查询时，程序在处理对方发送的公钥数据时没有进行正确的边界检查，可导致"rawbuf"缓冲区被溢出，导致拒绝服务攻击。 0 ZNC IRC Bouncer Fish plugin 目前厂商暂无提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...

Fedora 18 : zeroinstall-injector-2.3-1.fc18 (2013-12396)

Enhancements : - upstream now ships an experimental OCaml front-end, this is not yet enabled - Add fish-shell command completion - Allow relative files in and for local feeds. This makes it easy to test feeds before passing them to 0repo. Bug fixes : - Better handling of default=' in bindings. Th...

Fedora 19 : zeroinstall-injector-2.3-1.fc19 (2013-12414)

Enhancements : - upstream now ships an experimental OCaml front-end, this is not yet enabled - Add fish-shell command completion - Allow relative files in and for local feeds. This makes it easy to test feeds before passing them to 0repo. Bug fixes : - Better handling of default=' in bindings. Th...

Fedora 17 : zeroinstall-injector-2.3-1.fc17 (2013-12421)

Enhancements : - upstream now ships an experimental OCaml front-end, this is not yet enabled - Add fish-shell command completion - Allow relative files in and for local feeds. This makes it easy to test feeds before passing them to 0repo. Bug fixes : - Better handling of default=' in bindings. Th...

Fish Encryption - Stack Buffer Overflow Vulnerability

Document Title: =============== Fish Encryption - Stack Buffer Overflow Vulnerability References: =========== Download: http://www.vulnerability-lab.com/resources/videos/18.wmv View: http://www.youtube.com/watch?v=r0kA8imtYSw Release Date: ============= 2011-06-14 Vulnerability Laboratory ID VL-I...

Fish Encryption - Stack Buffer Overflow Vulnerability

Document Title: =============== Fish Encryption - Stack Buffer Overflow Vulnerability References: =========== Download: http://www.vulnerability-lab.com/resources/videos/18.wmv View: http://www.youtube.com/watch?v=r0kA8imtYSw Release Date: ============= 2011-06-14 Vulnerability Laboratory ID VL-I...

Fish Encryption IRC - Stack Buffer Overflow Vulnerability

Document Title: =============== Fish Encryption IRC - Stack Buffer Overflow Vulnerability References Source: ==================== http://fish.secure.la/forum/viewtopic.php?f=2&t=595 Video Exploitation: http://www.youtube.com/watch?v=r0kA8imtYSw Release Date: ============= 2011-06-07 Vulnerability...

Fish Encryption IRC - Stack Buffer Overflow Vulnerability

Document Title: =============== Fish Encryption IRC - Stack Buffer Overflow Vulnerability References Source: ==================== http://fish.secure.la/forum/viewtopic.php?f=2&t=595 Video Exploitation: http://www.youtube.com/watch?v=r0kA8imtYSw Release Date: ============= 2011-06-07 Vulnerability...

FiSH-irssi v0.99 Evil ircd Buffer Overflow (CVE-2007-1397)

Exploit for linux platform in category remote exploits FiSH IRC encryption evil ircd PoC exploit. Abuses CVE-2007-1397 Bad ircd, nasty bnc provider, nicknames over 100 char -- ruin. Runs arbitrary code which which in this case shuts down irssi. Tested on my own compiled FiSH with irssi/fedora/x86...

FiSH-irssi 0.99 - Evil ircd Buffer Overflow

FiSH-irssi 0.99 - Evil ircd Buffer Overflow FiSH IRC encryption evil ircd PoC exploit. Abuses CVE-2007-1397 Bad ircd, nasty bnc provider, nicknames over 100 char -- ruin. Runs arbitrary code which which in this case shuts down irssi. Tested on my own compiled FiSH with irssi/fedora/x86 There are ...

FiSH-irssi 0.99 Buffer Overflow

FiSH IRC encryption evil ircd PoC exploit. Abuses CVE-2007-1397 Bad ircd, nasty bnc provider, nicknames over 100 char -- ruin. Runs arbitrary code which which in this case shuts down irssi. Tested on my own compiled FiSH with irssi/fedora/x86 There are a lot more problems like this one, you shoul...

B.C. dating website hacked !

A hacker bankrupt into the online dating website Plenty of Fish aftermost week, auspiciously exporting hundreds of accounts. Markus Frind, CEO of the Vancouver-based company, said Monday all passwords accept been displace back the Jan. 18 aegis breach. He additionally said all annual users accept...