[SECURITY] [DSA 4189-1] quassel security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4189-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff May 02, 2018 https://www.debian.org/security/faq -...

FreeBSD : quassel -- multiple vulnerabilities (499f6b41-58db-4f98-b8e7-da8c18985eda)

Gentoo reports : quasselcore: corruption of heap metadata caused by qdatastream leading to preauth remote code execution. - Severity: high, by default the server port is publicly open and the address can be requested using the /WHOIS command of IRC protocol. - Description: In Qdatastream protocol...

quassel -- multiple vulnerabilities

Gentoo reports: quasselcore: corruption of heap metadata caused by qdatastream leading to preauth remote code execution. Severity: high, by default the server port is publicly open and the address can be requested using the /WHOIS command of IRC protocol. Description: In Qdatastream protocol each...

Muhstik Botnet Exploits Highly Critical Drupal Bug

Researchers are warning a recently discovered and highly critical vulnerability found in Drupal’s CMS platform is now being actively exploited by hackers who are using it to install cryptocurrency miners and to launch DDoS attacks via compromised systems. At the time of the disclosure, last month...

Debian DSA-4162-1 : irssi - security update

Multiple vulnerabilities have been discovered in Irssi, a terminal-based IRC client which can result in denial of service. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory DSA-4162. The text itself is copyright C...

Debian: Security Advisory (DSA-4162-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Design/Logic Flaw

A vulnerability has been identified in TIM 1531 IRC All versions V1.1. A remote attacker with network access to port 80/tcp or port 443/tcp could perform administrative operations on the device without prior authentication. Successful exploitation could allow to cause a denial-of-service, or read...

CVE-2018-4841

A vulnerability has been identified in TIM 1531 IRC All versions V1.1. A remote attacker with network access to port 80/tcp or port 443/tcp could perform administrative operations on the device without prior authentication. Successful exploitation could allow to cause a denial-of-service, or read...

CVE-2018-4841

A vulnerability has been identified in TIM 1531 IRC All versions V1.1. A remote attacker with network access to port 80/tcp or port 443/tcp could perform administrative operations on the device without prior authentication. Successful exploitation could allow to cause a denial-of-service, or read...

CVE-2018-4841

A vulnerability has been identified in TIM 1531 IRC All versions V1.1. A remote attacker with network access to port 80/tcp or port 443/tcp could perform administrative operations on the device without prior authentication. Successful exploitation could allow to cause a denial-of-service, or read...

CVE-2018-4841

CVE-2018-4841 (Siemens TIM 1531 IRC) affects TIM 1531 IRC, all versions prior to v1.1. Root cause: incorrect implementation of the authentication algorithm (CWE-303). Impact per sources: remote attacker with network access to port 80/TCP or 443/TCP can perform administrative operations without au...

PT-2018-1120 · Siemens · Tim 1531 Irc

Name of the Vulnerable Software and Affected Versions: TIM 1531 IRC versions prior to V1.1 Description: A remote attacker with network access to port 80/tcp or port 443/tcp could perform administrative operations on the device without prior authentication. Successful exploitation could allow...

Siemens TIM 1531 IRC

CVSS v3 9.8 ATTENTION: Exploitable remotely/low skill level to exploit. Vendor: Siemens Equipment: TIM 1531 IRC Vulnerability: Missing Authentication for Critical Function AFFECTED PRODUCTS Siemens reports that the vulnerability affects the following TIM 1531 IRC communications modules: TIM 1531...

[SECURITY] [DLA 1318-1] irssi security update

Package : irssi Version : 0.8.15-5+deb7u6 CVE ID : CVE-2018-7051 Debian Bug : 890677 It was discovered that there was an issue in the irssi IRC client where certain nick names could result in out-of-bounds access when printing theme strings. For Debian 7 "Wheezy", this issue has been fixed in irs...

USN-3590-1: Irssi vulnerabilities

It was discovered that Irssi incorrectly handled certain empty nick names. An attacker could possibly use this issue to cause a denial of service. CVE-2018-7050 It was discovered that Irssi incorrectly handled certain nick names. An attacker could possibly use this to access sensitive information...

[SECURITY] Fedora 27 Update: irssi-1.0.7-1.fc27

Irssi is a modular IRC client with Perl scripting. Only text-mode frontend is currently supported. The GTK/GNOME frontend is no longer being maintained...

[SECURITY] Fedora 26 Update: irssi-1.0.7-1.fc26

Irssi is a modular IRC client with Perl scripting. Only text-mode frontend is currently supported. The GTK/GNOME frontend is no longer being maintained...

Debian DLA-1289-1 : irssi security update

It was discovered that there where a number of vulnerabilities in irssi, the terminal based IRC client : - CVE-2018-7050: NULL pointer dereference for an 'empty' nick. - CVE-2018-7051: Certain nick names could result in out-of-bounds access when printing theme strings. - CVE-2018-7052: When the...

CVE-2018-7050

A NULL pointer dereference was found in Irssi when an "empty" nick joins a channel. A remote attacker, who can control an IRC server, could crash IRC clients by leveraging this vulnerability...

CVE-2018-7053

A use-after-free was found in the way Irssi, version 0.8.18 and later, handled out of order SASL messages sent by an IRC server. A remote attacker, who controls an IRC server, could crash the application by exploiting this flaw...