cve-2010-2075-analysis

CVE-2010-2075 – UnrealIRCd 后门远程代码执行 概述 本仓库记录了针对 CVE-2010-2075（影响 UnrealIRCd 3.2.8.1 的后门漏洞）的分析与利用过程。 该漏洞在受控的实验室环境中复现，目标机使用 Metasploitable 2，攻击机使用 Parrot OS。目标是识别存在漏洞的服务，确认后门的存在，并演示成功利用的影响。 漏洞详情 字段| 值 ---|--- CVE ID| CVE-2010-2075 软件| UnrealIRCd 3.2.8.1 服务端口| 6667/TCP 漏洞类型| 后门远程代码执行 严重性| 高 目标平台|...

UnrealIRCd: Denial of service

Background UnrealIRCd is an Internet Relay Chat IRC daemon. Description A vulnerability has been discovered in UnrealIRCd. Please review the CVE identifier referenced below for details. Impact An attacker may be able to achieve denial of service. Workaround There is no known workaround at this...

EUVD-2007-2778

Malware in sbrugna...

EUVD-2003-1367

Malware in sbrugna...

Debian DSA-4764-1 : inspircd - security update

Two security issues were discovered in the pgsql and mysql modules of the InspIRCd IRC daemon, which could result in denial of service. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory DSA-4764. The text itself is...

Charybdis SSL Certificate Spoofing Vulnerability

Charybdis is an IRCD service program. A security vulnerability exists in Charybdis SSL certificates, which allows attackers to exploit the vulnerability to spoof valid certificates...

IRC Daemon STARTTLS Command Support

The remote IRC daemon supports the use of the 'STARTTLS' command to switch from a cleartext to an encrypted communications channel. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid87817; scriptversion"1.4"; scriptsetattributeattribute:"pluginmodificationdate",...

IrcDelphi Daemon Server - Denial of Service

DCA-0010 Software - IrcDelphi Daemon Server Vendor Product Description - IRC Daemon IRCd, IRC Server coded in Delphi/Kylix using Indy components. Easy to use and light irc daemon. Bug Description - The IRC Daemon does not sanitize the variable NICK correctly leading to a Denial-of-Service flaw...

IrcDelphi DCA-00010 Vulnerability Report

DCA-0010 Software - IrcDelphi Daemon Server Vendor Product Description - IRC Daemon IRCd, IRC Server coded in Delphi/Kylix using Indy components. Easy to use and light irc daemon. Bug Description - The IRC Daemon does not sanitize the variable NICK correctly leading to a Denial-of-Service flaw...

IrcDelphi Denial Of Service

DCA-0010 Software - IrcDelphi Daemon Server Vendor Product Description - IRC Daemon IRCd, IRC Server coded in Delphi/Kylix using Indy components. Easy to use and light irc daemon. Bug Description - The IRC Daemon does not sanitize the variable NICK correctly leading to a Denial-of-Service flaw...

Talkative IRC v0.4.4.16 Response Buffer Overflow

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/projects/Framework/ class Metasploit3 'Talkative IRC v0.4.4.16...

CVE-2003-1377

Buffer overflow in the reverse DNS lookup of Smart IRC Daemon SIRCD 0.4.0 and 0.4.4 allows remote attackers to execute arbitrary code via a client with a long hostname...

CVE-2003-1377: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the reverse DNS lookup of Smart IRC Daemon SIRCD 0.4.0 and 0.4.4 allows remote attackers to execute arbitrary code via a client with a long hostname...

CVE-2007-2786

Ratbox IRC Daemon aka ircd-ratbox 2.2.5 and earlier allows remote attackers to cause a denial of service resource exhaustion by making many requests from a single client...

CVE-2007-2786

CVE-2007-2786 affects Ratbox IRC Daemon (ircd-ratbox) 2.2.5 and earlier. The issue allows remote attackers to cause a denial of service via resource exhaustion by making many requests from a single client. The available documents confirm the vulnerability and affected version range; they do not p...

CVE-2007-2786

Ratbox IRC Daemon aka ircd-ratbox 2.2.5 and earlier allows remote attackers to cause a denial of service resource exhaustion by making many requests from a single client...

CVE-2007-2786: Undefined Security Weakness

Ratbox IRC Daemon aka ircd-ratbox 2.2.5 and earlier allows remote attackers to cause a denial of service resource exhaustion by making many requests from a single client...

[OpenPKG-SA-2007.017] OpenPKG Security Advisory (ratbox)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Publisher Name: OpenPKG GmbH Publisher Home: http://openpkg.com/ Advisory Id public: OpenPKG-SA-2007.017 Advisory Type: OpenPKG Security Advisory SA Advisory Directory: http://openpkg.com/go/OpenPKG-SA Advisory Document:...

CVE-2001-1488

The CVE-2001-1488 entry concerns Open Projects Network Internet Relay Chat (IRC) daemon u2.10.05.18, which does not perform a double-reverse DNS lookup. This information indicates a potential hostname spoofing vulnerability where remote attackers could spoof any valid hostname on the Internet. Th...

CVE-2001-1488: Undefined Security Weakness

Open Projects Network Internet Relay Chat IRC daemon u2.10.05.18 does not perform a double-reverse DNS lookup, which allows remote attackers to spoof any valid hostname on the Internet. NOTE: a followup post suggests that this is not an issue in the daemon...