CVE-2003-0324

Buffer overflows in EPIC IRC Client EPIC4 1.0.1 allows remote malicious IRC servers to cause a denial of service crash and possibly execute arbitrary code via long replies that are not properly handled by the 1 userhostcmdreturned function, or 2 Statusbar capability...

CVE-2003-0328

EPIC IRC Client EPIC4 pre2.002, pre2.003, and possibly later versions, allows remote malicious IRC servers to cause a denial of service crash and possibly execute arbitrary code via a CTCP request from a large nickname, which causes an incorrect length calculation...

CVE-2003-0328: Undefined Security Weakness

EPIC IRC Client EPIC4 pre2.002, pre2.003, and possibly later versions, allows remote malicious IRC servers to cause a denial of service crash and possibly execute arbitrary code via a CTCP request from a large nickname, which causes an incorrect length calculation...

CVE-2003-0324: Undefined Security Weakness

Buffer overflows in EPIC IRC Client EPIC4 1.0.1 allows remote malicious IRC servers to cause a denial of service crash and possibly execute arbitrary code via long replies that are not properly handled by the 1 userhostcmdreturned function, or 2 Statusbar capability...

CVE-2003-0321: Undefined Security Weakness

Multiple buffer overflows in BitchX IRC client 1.0-0c19 and earlier allow remote malicious IRC servers to cause a denial of service crash and possibly execute arbitrary code via long hostnames, nicknames, or channel names, which are not properly handled by the functions 1 sendctcp, 2...

CVE-2003-0322: Undefined Security Weakness

Integer overflow in BitchX IRC client 1.0-0c19 and earlier allows remote malicious IRC servers to cause a denial of service crash...

BitchX security fixes

New BitchX packages are available to fix security problems found by Timo Sirainen. BitchX is an IRC Internet Relay Chat client. Under certain circumstances, a malicious IRC server could cause BitchX to crash, or possibly to run arbitrary code as the user running BitchX. All sites running BitchX a...

CVE-2003-0334

BitchX IRC client 1.0c20cvs and earlier allows attackers to cause a denial of service core dump via certain channel mode changes that are not properly handled in names.c...

[SECURITY] [DSA 298-1] New EPIC4 packages fix DoS and arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 298-1 [email protected] http://www.debian.org/security/ Martin Schulze May 2nd, 2003 http://www.debian.org/security/faq -...

DSA-287 epic - buffer overflows

Bulletin has no description...

CVE-2002-0382

Summary: CVE-2002-0382 affects the XChat IRC client. The issue arises when handling a /dns query, where the DNS reverse lookup can contain shell metacharacters, allowing arbitrary commands to be executed with the user’s privileges. This is caused by XChat passing the resolver/hostname to a shell ...

CVE-2002-0984

The CVE affects Light’s EPIC-based IRC script (epic4-script-light) in Light 2.7.x before 2.7.30p5 and 2.8.x before 2.8pre10. A remote attacker can trigger arbitrary code execution if a user joins a channel whose topic contains EPIC4 code, via the IRC script. Remediation involves updating to the p...

CVE-2002-0006

Vulnerability summary (CVE-2002-0006) : XChat versions 1.8.7 and earlier (including default configurations of 1.4.2 and 1.4.3) are vulnerable. A remote attacker can execute arbitrary IRC commands as another client by sending specially encoded characters in a PRIVMSG that calls CTCP PING, which ca...

CVE-2002-0006

XChat 1.8.7 and earlier, including default configurations of 1.4.2 and 1.4.3, allows remote attackers to execute arbitrary IRC commands as other clients via encoded characters in a PRIVMSG command that calls CTCP PING, which expands the characters in the client response when the percascii variabl...

CVE-2002-0425

mIRC DCC server protocol allows remote attackers to gain sensitive information such as alternate IRC nicknames via a "100 testing" message in a DCC connection request that cannot be ignored or canceled by the user, which may leak the alternate nickname in a response message...

CVE-2002-0984

The IRC script included in Light 2.7.x before 2.7.30p5, and 2.8.x before 2.8pre10, running EPIC allows remote attackers to execute arbitrary code if the user joins a channel whose topic includes EPIC4 code...

CVE-2002-0425

The CVE affects mIRC DCC server protocol. The vulnerability allows remote attackers to access sensitive information, specifically alternate IRC nicknames, via a "100 testing" message in a DCC connection request that the user cannot ignore or cancel. This leads to disclosure of alternate nicknames...

CVE-2002-1486

Multiple buffer overflows in the IRC component of Trillian 0.73 and 0.74 allows remote malicious IRC servers to cause a denial of service and possibly execute arbitrary code via 1 a large response from the server, 2 a JOIN with a long channel name, 3 a long "raw 221" message, 4 a PRIVMSG with a...

CVE-2002-1487

The IRC component of Trillian 0.73 and 0.74 allows remote malicious IRC servers to cause a denial of service crash by sending the raw messages 1 206, 2 211, 3 213, 4 214, 5 215, 6 217, 7 218, 8 243, 9 302, 10 317, 11 324, 12 332, 13 333, 14 352, and 15 367...

CVE-2002-0382: Undefined Security Weakness

XChat IRC client allows remote attackers to execute arbitrary commands via a /dns command on a host whose DNS reverse lookup contains shell metacharacters...