CVE-2005-0131

The CVE-2005-0131 entry concerns Konversation 0.15. The Quick Connection dialog erroneously uses the user’s password as the nickname when connecting to an IRC server, which can leak the password to other users. This is tied to the Konversation IRC client and stems from the login handling in the Q...

CVE-2005-0131: Undefined Security Weakness

The Quick Connection dialog in Konversation 0.15 inadvertently uses the user-provided password as the nickname instead of the user-provided nickname when connecting to the IRC server, which could leak the password to other users...

Debian DSA-595-1 : bnc - buffer overflow

Leon Juranic discovered that BNC, an IRC session bouncing proxy, does not always protect buffers from being overwritten. This could exploited by a malicious IRC server to overflow a buffer of limited size and execute arbitrary code on the client host. %NASLMINLEVEL 70300 C Tenable Network Securit...

CVE-2004-1052: Undefined Security Weakness

Buffer overflow in the getnickuserhost function in BNC 2.8.9, and possibly other versions, allows remote IRC servers to execute arbitrary code via an IRC server response that contains many 1 ! exclamation or 2 @ at sign characters...

BNC IRC Server Incorrect Password Authentication Bypass

The remote host is running a version of the BNC IRC proxy that contains a flaw in its authentication process that accepted only logins with incorrect passwords. An attacker may use this issue to gain access to the remote IRC proxy server. C Tenable Network Security, Inc. include"compat.inc";...

BNC < 2.9.1 getnickuserhost IRC Server Response Buffer Overflow

Binary data 2403.prm...

BNC IRC Server < 2.9.1 Authentication Bypass

Binary data 2404.prm...

bnc -- remotely exploitable buffer overflow in getnickuserhost

A LSS Security Advisory reports: There is a buffer overflow vulnerability in getnickuserhost function that is called when BNC is processing response from IRC server. Vulnerability can be exploited if attacker tricks user to connect to his fake IRC server that will exploit this vulnerability. If t...

Trillian IRC Server Response Remote Overflow

Binary data 1871.prm...

CGI:IRC Server Detection

Binary data 3530.prm...

DoS in Crackalaka 1.0.8

Donato Ferrante Application: Crackalaka http://www.stalphonsos.com/attila/crackalaka Version: 1.0.8 Bug: Denial Of Service Date: 09-Apr-2004 Author: Donato Ferrante e-mail: [email protected] web: www.autistici.org/fdonato xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx...

Crackalaka IRC Server 1.0.8 - Remote Denial of Service

source: https://www.securityfocus.com/bid/10092/info It has been reported that Crackalaka may be prone to a remote denial of service vulnerability that may allow an attacker to crash the server by sending an excessive amount of data. Crackalaka version 1.0.8 is reported to be prone to this issue,...

Gamespy 3d buffer overflow

Buffer overflow on IRC server reply parsing...

ChatZilla 0.8.23 - Remote Denial of Service

ChatZilla 0.8.23 - Remote Denial of Service // source: https://www.securityfocus.com/bid/8627/info It has been reported that ChatZilla is prone to a denial of service vulnerability. The problem arises as a remote attacker posing as an IRC server sends specially crafted requests to the client...

CVE-2003-0322: Undefined Security Weakness

Integer overflow in BitchX IRC client 1.0-0c19 and earlier allows remote malicious IRC servers to cause a denial of service crash...

CVE-2003-0321: Undefined Security Weakness

Multiple buffer overflows in BitchX IRC client 1.0-0c19 and earlier allow remote malicious IRC servers to cause a denial of service crash and possibly execute arbitrary code via long hostnames, nicknames, or channel names, which are not properly handled by the functions 1 sendctcp, 2...

BitchX 1.0 - Remote 'Send_CTCP()' Memory Corruption

// source: https://www.securityfocus.com/bid/7097/info A memory corruption vulnerability has been discovered in BitchX 1.0c19. This issue occurs when handling server-supplied data and may cause characters to be written to sensitive stack memory. As a result, it may be possible for a malicious IRC...

BitchX 1.0 - Remote Send_CTCP() Memory Corruption

BitchX 1.0 - Remote SendCTCP Memory Corruption // source: https://www.securityfocus.com/bid/7097/info A memory corruption vulnerability has been discovered in BitchX 1.0c19. This issue occurs when handling server-supplied data and may cause characters to be written to sensitive stack memory. As a...

IRC Daemon Version Detection

This plugin determines the version of the IRC daemon. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid11156; scriptversion"$Revision: 1.15 $"; scriptcvsdate"$Date: 2016/01/08 15:38:43 $"; scriptnameenglish:"IRC Daemon Version Detection"; scriptsummaryenglish:"IRCD...

And Again. Trillian &#39;raw 221&#39; Overflow.

Discovered: ----------- 02 September 2002 By Me, Lance Fitz-Herbert aka phrizer. Vulnerable Applications: ------------------------ Tested On Trillian .73 and .74, But im guessing older versions are also vulnerable. Impact: ------- Medium-High. This could allow arbitary code to be executed on the...