2685 matches found
CVE-2004-1052: Undefined Security Weakness
Buffer overflow in the getnickuserhost function in BNC 2.8.9, and possibly other versions, allows remote IRC servers to execute arbitrary code via an IRC server response that contains many 1 ! exclamation or 2 @ at sign characters...
BNC IRC Server Incorrect Password Authentication Bypass
The remote host is running a version of the BNC IRC proxy that contains a flaw in its authentication process that accepted only logins with incorrect passwords. An attacker may use this issue to gain access to the remote IRC proxy server. C Tenable Network Security, Inc. include"compat.inc";...
BNC 2.8.9 remote buffer overflow
LSS Security Advisory LSS-2004-11-3 http://security.lss.hr --- Title : BNC 2.8.9 remote buffer overflow Advisory ID : LSS-2004-11-3 Date : November 10th, 2004 Advisory URL: : http://security.lss.hr/en/index.php?page=details&ID=LSS-2004-11-03 Impact : Remote code execution or DoS attack Risk level...
BNC IRC Server < 2.9.1 Authentication Bypass
Binary data 2404.prm...
BNC < 2.9.1 getnickuserhost IRC Server Response Buffer Overflow
Binary data 2403.prm...
bnc -- remotely exploitable buffer overflow in getnickuserhost
A LSS Security Advisory reports: There is a buffer overflow vulnerability in getnickuserhost function that is called when BNC is processing response from IRC server. Vulnerability can be exploited if attacker tricks user to connect to his fake IRC server that will exploit this vulnerability. If t...
BNC: Input validation flaw
Background BNC is an IRC proxying server Description A flaw exists in the input parsing of BNC where part of the sbufgetmsg function handles the backspace character incorrectly. Impact A remote user could issue commands using fake authentication credentials and possibly gain access to scripts...
[Full-Disclosure] [ GLSA 200410-13 ] BNC: Input validation flaw
Gentoo Linux Security Advisory GLSA 200410-13 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...
Debian DSA-099-1 : xchat - IRC session hijacking
zen-parse found a vulnerability in the XChat IRC client that allows an attacker to take over the users IRC session. It is possible to trick XChat IRC clients into sending arbitrary commands to the IRC server they are on, potentially allowing social engineering attacks, channel takeovers, and deni...
IRC Bot ident Server Detection
This host seems to be running an ident server, but the ident server responds to an empty query with a random userid. This behavior may be indicative of an IRC bot, worm and/or virus infection. It is very likely this system has been compromised. IRC bot ident server detection Created: 9/22/04 Last...
CVE-2004-0274
Share.mod in Eggheads Eggdrop IRC bot 1.6.10 through 1.6.15 can mistakenly assign STATOFFERED status to a bot that is not a sharebot, which allows remote attackers to use STATOFFERED to promote a bot to a sharebot and conduct unauthorized activities...
CVE-2004-0274
The vulnerability CVE-2004-0274 affects Eggdrops Eggheads bot, specifically Share.mod. It arises when the Share.mod component can mistakenly assign STAT_OFFERED to a bot that is not a sharebot, enabling remote attackers to promote a non-sharebot into a sharebot and perform unauthorized activities...
CVE-2004-0274
Share.mod in Eggheads Eggdrop IRC bot 1.6.10 through 1.6.15 can mistakenly assign STATOFFERED status to a bot that is not a sharebot, which allows remote attackers to use STATOFFERED to promote a bot to a sharebot and conduct unauthorized activities...
CVE-2004-0274: Undefined Security Weakness
Share.mod in Eggheads Eggdrop IRC bot 1.6.10 through 1.6.15 can mistakenly assign STATOFFERED status to a bot that is not a sharebot, which allows remote attackers to use STATOFFERED to promote a bot to a sharebot and conduct unauthorized activities...
ignitionServer SERVER Command Spoofed Server Saturation DoS
The remote host is running a version of the IgnitionServer IRC service that could be vulnerable to a denial of service in the SERVER command. An attacker could crash the remote host by misusing the SERVER command repeatdly. C Tenable Network Security, Inc. include"compat.inc"; ifdescription...
Trillian IRC Module Channel Name Format String
Binary data 1870.prm...
Trillian IRC User Mode Numeric Remote Overflow
Binary data 1866.prm...
IRC Client Detection
Binary data 1878.prm...