CVE-2010-1155

Irssi before 0.8.15, when SSL is used, does not verify that the server hostname matches a domain name in the subject's Common Name CN field or a Subject Alternative Name field of the X.509 certificate, which allows man-in-the-middle attackers to spoof IRC servers via an arbitrary certificate...

CVE-2010-1156

The CVE-2010-1156 issue affects Irssi prior to 0.8.15 in core/nicklist.c, where a fuzzy nick-match during channel-leave can trigger a NULL pointer dereference and crash (denial of service). CVE-2010-1155 relates to improper SSL host-name verification, enabling potential MITM via arbitrary certifi...

CVE-2010-1155

CVE-2010-1155 affects Irssi prior to 0.8.15. When using SSL, Irssi did not verify that the server hostname matched CN or SAN in the X.509 certificate, enabling MITM with an arbitrary certificate. Related issue CVE-2010-1156 concerns a remote crash/NULL pointer dereference via a fuzzy nick-match v...

CVE-2010-1156

core/nicklist.c in Irssi before 0.8.15 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via vectors related to an attempted fuzzy nick match at the instant that a victim leaves a channel...

CVE-2010-1155

Irssi before 0.8.15, when SSL is used, does not verify that the server hostname matches a domain name in the subject's Common Name CN field or a Subject Alternative Name field of the X.509 certificate, which allows man-in-the-middle attackers to spoof IRC servers via an arbitrary certificate...

Ubuntu 8.04 LTS / 8.10 / 9.04 / 9.10 : irssi vulnerabilities (USN-929-1)

It was discovered that irssi did not perform certificate host validation when using SSL connections. An attacker could exploit this to perform a man in the middle attack to view sensitive information or alter encrypted communications. CVE-2010-1155 Aurelien Delaitre discovered that irssi could be...

irssi -- multiple vulnerabilities

Two vulnerabilities have found in irssi. The first issue could allow man-in-the-middle attacks due to a missing comparison of SSL server hostnames and the certificate domain names e.g. CN. A second vulnerability, related to the nick matching code, could be triggered by remote attackers in order t...

Ubuntu Update for irssi vulnerabilities USN-929-1

Ubuntu Update for Linux kernel vulnerabilities USN-929-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN9291.nasl 7965 2017-12-01 07:38:25Z santu $ Ubuntu Update for irssi vulnerabilities USN-929-1 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH,...

Ubuntu: Security Advisory (USN-929-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-929-1: irssi vulnerabilities

It was discovered that irssi did not perform certificate host validation when using SSL connections. An attacker could exploit this to perform a man in the middle attack to view sensitive information or alter encrypted communications. CVE-2010-1155 Aurelien Delaitre discovered that irssi could be...

CVE-2010-1155

Irssi before 0.8.15, when SSL is used, does not verify that the server hostname matches a domain name in the subject's Common Name CN field or a Subject Alternative Name field of the X.509 certificate, which allows man-in-the-middle attackers to spoof IRC servers via an arbitrary certificate...

CVE-2010-1156

core/nicklist.c in Irssi before 0.8.15 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via vectors related to an attempted fuzzy nick match at the instant that a victim leaves a channel...

Mandriva Security Advisory MDVSA-2009:133-1 (irssi)

The remote host is missing an update to irssi announced via advisory MDVSA-2009:133-1. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...

Gentoo Security Advisory GLSA 200909-13 (irssi)

The remote host is missing updates announced in advisory GLSA 200909-13. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200909-13 (irssi)

The remote host is missing updates announced in advisory GLSA 200909-13. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

GLSA-200909-13 : irssi: Execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-200909-13 irssi: Execution of arbitrary code Nemo discovered an off-by-one error leading to a heap overflow in irssi's eventwallops parsing function. Impact : A remote attacker might entice a user to connect to a malicious IRC...

irssi: Execution of arbitrary code

Background irssi is a modular textUI IRC client with IPv6 support. Description Nemo discovered an off-by-one error leading to a heap overflow in irssi's eventwallops parsing function. Impact A remote attacker might entice a user to connect to a malicious IRC server, use a man-in-the-middle attack...

Fedora Core 10 FEDORA-2009-7004 (irssi)

The remote host is missing an update to irssi announced via advisory FEDORA-2009-7004. OpenVAS Vulnerability Test $Id: fcore20097004.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-7004 irssi Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft...

Fedora 10 : irssi-0.8.13-3.fc10 (2009-7004)

Tue Jun 23 2009 Huzaifa Sidhpurwala - 0.8.13-3 - Resolve CVE-2009-1959 - Fri May 1 2009 Marek Mahut - 0.8.13-1 - Upstream release - Wed Feb 25 2009 Fedora Release Engineering - 0.8.12-13 - Rebuilt for https://fedoraproject.org/wiki/Fedora11MassRebuild - Sat Jan 17 2009 Tomas Mraz - 0.8.12-12 -...

Fedora Core 10 FEDORA-2009-7004 (irssi)

The remote host is missing an update to irssi announced via advisory FEDORA-2009-7004. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...