CVE-2003-0334

BitchX IRC client 1.0c20cvs and earlier allows attackers to cause a denial of service core dump via certain channel mode changes that are not properly handled in names.c...

CVE-2003-0334

The CVE-2003-0334 issue affects BitchX IRC client versions 1.0c20cvs and earlier. A DoS (core dump) can be triggered by certain channel mode changes that are not properly handled in names.c. The Mandrake advisory notes the vulnerability was fixed in CVS and patched in released updates. Practicall...

CVE-2003-0324

Buffer overflows in EPIC IRC Client EPIC4 1.0.1 allows remote malicious IRC servers to cause a denial of service crash and possibly execute arbitrary code via long replies that are not properly handled by the 1 userhostcmdreturned function, or 2 Statusbar capability...

CVE-2003-0322

Integer overflow in BitchX IRC client 1.0-0c19 and earlier allows remote malicious IRC servers to cause a denial of service crash...

CVE-2003-0321

CVE-2003-0321 affects BitchX IRC client up to version 1.0-0c19 and earlier. The vulnerability stems from multiple buffer overflows in core parsing/handling paths (send_ctcp, cannot_join_channel, cluster, BX_compress_modes, handle_oper_vision, ban_it) when processing long hostnames, nicknames, or ...

CVE-2003-0324

EPIC IRC Client (EPIC4) 1.0.1 is affected by a buffer overflow vulnerability described in CVE-2003-0324. The issue allows a remote malicious IRC server to cause a denial of service (crash) and potentially execute arbitrary code by sending long replies that are not properly handled by the userhost...

CVE-2003-0328

EPIC IRC Client EPIC4 pre2.002, pre2.003, and possibly later versions, allows remote malicious IRC servers to cause a denial of service crash and possibly execute arbitrary code via a CTCP request from a large nickname, which causes an incorrect length calculation...

CVE-2003-0321

Multiple buffer overflows in BitchX IRC client 1.0-0c19 and earlier allow remote malicious IRC servers to cause a denial of service crash and possibly execute arbitrary code via long hostnames, nicknames, or channel names, which are not properly handled by the functions 1 sendctcp, 2...

CVE-2003-0322

CVE-2003-0322 describes an integer overflow in BitchX IRC client 1.0-0c19 and earlier that allows a remote, malicious IRC server to crash the client (DoS). Affected software: BitchX (IRC client) prior to 1.0-0c19. Root cause: integer overflow when processing certain server replies, leading to a d...

CVE-2003-0328

CVE-2003-0328 describes a remote denial-of-service and potential arbitrary-code execution in EPIC IRC Client (EPIC4) when connecting to a malicious IRC server. The issue stems from a CTCP response with a large nickname that leads to an incorrect length calculation, enabling a buffer overrun. Publ...

CVE-2003-0328

EPIC IRC Client EPIC4 pre2.002, pre2.003, and possibly later versions, allows remote malicious IRC servers to cause a denial of service crash and possibly execute arbitrary code via a CTCP request from a large nickname, which causes an incorrect length calculation...

CVE-2003-0324

Buffer overflows in EPIC IRC Client EPIC4 1.0.1 allows remote malicious IRC servers to cause a denial of service crash and possibly execute arbitrary code via long replies that are not properly handled by the 1 userhostcmdreturned function, or 2 Statusbar capability...

BitchX security fixes

New BitchX packages are available to fix security problems found by Timo Sirainen. BitchX is an IRC Internet Relay Chat client. Under certain circumstances, a malicious IRC server could cause BitchX to crash, or possibly to run arbitrary code as the user running BitchX. All sites running BitchX a...

CVE-2003-0334

BitchX IRC client 1.0c20cvs and earlier allows attackers to cause a denial of service core dump via certain channel mode changes that are not properly handled in names.c...

[SECURITY] [DSA 298-1] New EPIC4 packages fix DoS and arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 298-1 [email protected] http://www.debian.org/security/ Martin Schulze May 2nd, 2003 http://www.debian.org/security/faq -...

CVE-2002-0382

Summary: CVE-2002-0382 affects the XChat IRC client. The issue arises when handling a /dns query, where the DNS reverse lookup can contain shell metacharacters, allowing arbitrary commands to be executed with the user’s privileges. This is caused by XChat passing the resolver/hostname to a shell ...

[argv] BitchX-353 Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Mon Feb 17 15:26:06 EST 2003 1. Topic: BitchX IRC Client 2. Relevant versions: Vulnerable: BitchX-75p3 BitchX-1.0c16 BitchX-1.0c19 BitchX-1.0c20cvs Not Vulnerable: BitchX-1.0c18 3. Problem description: A denial of service vulnerability exists in BitchX. Sending ...

CVE-2002-2271

Buffer overflow in BigFun 1.51b IRC client, when the Direct Client Connection DCC option is used, allows remote attackers to cause a denial of service crash via a long string...

CVE-2002-0928

Buffer overflow in the Pirch 98 IRC client allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long hyperlink in a channel or private message...

CVE-2002-0983

IRC client irssi in irssi-text before 0.8.4 allows remote attackers to cause a denial of service crash via an IRC channel that has a long topic followed by a certain string, possibly triggering a buffer overflow...