178 matches found
irc-info NSE Script
Gathers information from an IRC server. It uses STATS, LUSERS, and other queries to obtain this information. Example Usage nmap -sV -sC Script Output 6665/tcp open irc | irc-info: | server: asimov.freenode.net | version: ircd-seven-1.1.320111112-b71671d1e846,charybdis-3.4-dev. asimov.freenode.net...
mIRC PRIVMSG Handling Remote Buffer Overflow
The version of mIRC installed on the remote host is earlier than 6.35 and thus reportedly prone to a buffer overflow attack that can be triggered by a long hostname in a PRIVMSG message. If an attacker can trick a user into connecting to a malicious IRC server perhaps via JavaScript in an HTML...
mIRC 6.34 Remote Buffer Overflow PoC
No description provided by source. Mirc 6.34 Remote Buffer Overflow This poc allow you to own the 2 first EDI & EDX bytes. To become remote, add a simple document.location.href=irc://server.com/... in some html page use IO::Socket; sub sock my $sock=new IO::Socket::INET Listen = 1, LocalAddr =...
mIRC 6.34 - Remote Buffer Overflow (PoC)
Mirc 6.34 Remote Buffer Overflow This poc allow you to own the 2 first EDI & EDX bytes. To become remote, add a simple document.location.href=irc://server.com/... in some html page use IO::Socket; sub sock my $sock=new IO::Socket::INET Listen = 1, LocalAddr = 'localhost', LocalPort = 6667, Proto ...
mIRC 6.34 Remote Buffer Overflow PoC
Exploit for unknown platform in category dos / poc ==================================== mIRC 6.34 Remote Buffer Overflow PoC ==================================== Mirc 6.34 Remote Buffer Overflow This poc allow you to own the 2 first EDI & EDX bytes. To become remote, add a simple...
XChat 2.8.7b - 'URI Handler' Remote Code Execution (Internet Explorer 6/7)
Xchat Welcome to my personal website document.location='ircs://[email protected]" --command "shell calc"' milw0rm.com 2008-06-13...
mIRC PRIVMSG hostname buffer overflow
Added: 03/13/2008 CVE: CVE-2008-4449 BID: 31552 OSVDB: 48752 Background mIRC is an Internet Relay Chat IRC client. Problem A buffer overflow in mIRC allows command execution when a user connects to a malicious IRC server which sends a PRIVMSG message with a long, specially crafted hostname...
mIRC PRIVMSG hostname buffer overflow
Added: 03/13/2008 CVE: CVE-2008-4449 BID: 31552 OSVDB: 48752 Background mIRC is an Internet Relay Chat IRC client. Problem A buffer overflow in mIRC allows command execution when a user connects to a malicious IRC server which sends a PRIVMSG message with a long, specially crafted hostname...
DEBIAN-CVE-2007-6062
irc-channel.c in ngIRCd before 0.10.3 allows remote attackers to cause a denial of service crash via a JOIN command without a channel argument...
DNS Recursion Bandwidth Amplification - Denial of Service (PoC)
!/usr/bin/perl Get Net::RawIP at http://search.cpan.org/CPAN/authors/id/S/SZ/SZABGAB/Net-RawIP-0.2101.tar.gz cpan Net::DNS:Resolver seems to work fine on each machine I throw it on, as well. PS: To see if you can spoof, check out the ANA Spoofer project. http://spoofer.csail.mit.edu/ Written by...
GLSA-200709-07 : Eggdrop: Buffer overflow
The remote host is affected by the vulnerability described in GLSA-200709-07 Eggdrop: Buffer overflow Bow Sineath discovered a boundary error in the file mod/server.mod/servrmsg.c when processing overly long private messages sent by an IRC server. Impact : A remote attacker could entice an Eggdro...
Stack overflow
Stack-based buffer overflow in BitchX 1.1 Final allows remote IRC servers to execute arbitrary code via a long string in a MODE command, related to the pmode variable...
CVE-2007-4584
Stack-based buffer overflow in BitchX 1.1 Final allows remote IRC servers to execute arbitrary code via a long string in a MODE command, related to the pmode variable...
ircu IRC server multiple security vulnerabilities
Multiple DoS conditions, channels hijacking, information leakage...
Vulnerability in multiple "now playing" scripts for various IRC clients
In October 2006 I discovered many "now playing" scripts for various IRC clients allow an attacker to send commands to the IRC server on behalf of the user. Details ======= Many scripts for various IRC clients, that report the name of the currently playing song in a media player on IRC share the...
virc-oday.txt
!/usr/bin/python ViRC 2.0 'JOIN Response' 0day Remote SEH Overwrite PoC Exploit Bug discovered by Krystian Kloskowski h07 Tested on Visual IRC 2.0 / 2k SP4 Polish Shellcode type: Windows Execute Command calc.exe How stuff works ? .. ViRC ----- ..JOIN.. ------------- exploittunnel...
ViRC 2.0 - JOIN Response Remote Overwrite (SEH)
ViRC 2.0 - JOIN Response Remote Overwrite SEH !/usr/bin/python ViRC 2.0 'JOIN Response' 0day Remote SEH Overwrite PoC Exploit Bug discovered by Krystian Kloskowski h07 Tested on Visual IRC 2.0 / 2k SP4 Polish Shellcode type: Windows Execute Command calc.exe How stuff works ? .. ViRC ----- ..JOIN...
ViRC 2.0 (JOIN Response) Remote SEH Overwrite Exploit 0day
Exploit for unknown platform in category remote exploits ========================================================== ViRC 2.0 JOIN Response Remote SEH Overwrite Exploit 0day ========================================================== !/usr/bin/python ViRC 2.0 'JOIN Response' 0day Remote SEH Overwri...
CVE-2007-2807
CVE-2007-2807 is a stack-based buffer overflow in Eggdrop (mod/server.mod/servmsg.c) affecting Eggdrop 1.6.18 and earlier, exploitable via a long private message to achieve remote code execution. Several connected sources (e.g., Debian DSA-1826, Fedora/Mandriva advisories) confirm a remote vulner...