CVE-2007-2807

CVE-2007-2807 is a stack-based buffer overflow in Eggdrop (mod/server.mod/servmsg.c) affecting Eggdrop 1.6.18 and earlier, exploitable via a long private message to achieve remote code execution. Several connected sources (e.g., Debian DSA-1826, Fedora/Mandriva advisories) confirm a remote vulner...

ratvox IRC server DoS

Resource exhaustion by too many open connections...

Null pointer dereference

0irc 1345 build 20060823 allows remote attackers to cause a denial of service application crash by operating an IRC server that sends a long string to a client, which triggers a NULL pointer dereference...

CVE-2007-1648

0irc 1345 build 20060823 allows remote attackers to cause a denial of service application crash by operating an IRC server that sends a long string to a client, which triggers a NULL pointer dereference...

CVE-2007-1648

0irc 1345 build 20060823 allows remote attackers to cause a denial of service application crash by operating an IRC server that sends a long string to a client, which triggers a NULL pointer dereference...

CVE-2007-1648

CVE-2007-1648 affects 0irc 1345 build 20060823. A remote attacker can cause an application crash by having the IRC server send a long string to a client, triggering a NULL pointer dereference (DoS). Root cause: NULL pointer dereference when processing oversized server messages. Impact: denial of ...

CVE-2007-1648: Undefined Security Weakness

0irc 1345 build 20060823 allows remote attackers to cause a denial of service application crash by operating an IRC server that sends a long string to a client, which triggers a NULL pointer dereference...

USN-409-1: ksirc vulnerability

Federico L. Bossi Bonin discovered a Denial of Service vulnerability in ksirc. By sending a special response packet, a malicious IRC server could crash ksirc...

[KDE Security Advisory] ksirc Denial of Service vulnerability

KDE Security Advisory: ksirc denial of service vulnerability Original Release Date: 2007-01-09 URL: http://www.kde.org/info/security/advisory-20070109-1.txt 0. References CVE-2006-6811 http://www.milw0rm.com/exploits/3023 http://www.securityfocus.com/bid/21790 1. Systems affected: ksirc as shippe...

CVE-2006-6811

KsIRC 1.3.12 allows remote attackers to cause a denial of service crash via a long PRIVMSG string when connecting to an Internet Relay Chat IRC server, which causes an assertion failure and results in a NULL pointer dereference. NOTE: this issue was originally reported as a buffer overflow...

CVE-2006-6811

KsIRC 1.3.12 allows remote attackers to cause a denial of service crash via a long PRIVMSG string when connecting to an Internet Relay Chat IRC server, which causes an assertion failure and results in a NULL pointer dereference. NOTE: this issue was originally reported as a buffer overflow...

postnuke0750.txt

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 PostNuke SQL Injection 0.750=x cXIb8O3.5 Author: cXIb8O3 Date: 2.3.2005 from SecurityReason.Com - --- 0.Description --- PostNuke: The Phoenix Release 0.750 PostNuke is an open source, open developement content management system CMS. PostNuke started a...

IRC Server Detection

Binary data 3107.prm...

FreeBSD : bnc -- remotely exploitable buffer overflow in getnickuserhost (9be819c6-4633-11d9-a9e7-0001020eed82)

A LSS Security Advisory reports : There is a buffer overflow vulnerability in getnickuserhost function that is called when BNC is processing response from IRC server. Vulnerability can be exploited if attacker tricks user to connect to his fake IRC server that will exploit this vulnerability. If...

CVE-2005-0131

The Quick Connection dialog in Konversation 0.15 inadvertently uses the user-provided password as the nickname instead of the user-provided nickname when connecting to the IRC server, which could leak the password to other users...

CVE-2005-0131

The Quick Connection dialog in Konversation 0.15 inadvertently uses the user-provided password as the nickname instead of the user-provided nickname when connecting to the IRC server, which could leak the password to other users...

multiple remote denial of service vulnerabilities in Gaim

I. Synopsis Gaim http://gaim.sourceforge.net is a multi-protocol instant messaging client. I have identified several remote denial of service vulnerabilities affecting Gaim 1.2.0, and probably older versions as well. II. Problems 1. Buffer overread in gaimmarkupstriphtml A programming error in...

CVE-2004-1052

Buffer overflow in the getnickuserhost function in BNC 2.8.9, and possibly other versions, allows remote IRC servers to execute arbitrary code via an IRC server response that contains many 1 ! exclamation or 2 @ at sign characters...

CVE-2004-1716

CVE-2004-1716 is a cross-site scripting (XSS) vulnerability affecting PForum before 1.26 . The issue allows remote attackers to inject arbitrary web script or HTML through the IRC Server or AIM ID fields in the user profile. The connected documents confirm the affected component and vectors but d...

CVE-2004-1716: Undefined Security Weakness

Cross-site scripting XSS vulnerability in PForum before 1.26 allows remote attackers to inject arbitrary web script or HTML via the 1 IRC Server or 2 AIM ID fields in the user profile...