CVE-2001-0944: Undefined Security Weakness

DDE in mIRC allows local users to launch applications under another user's account via a DDE message that executes a command, which may be executed by the other user's process...

Проблемы с DDE в mIRC (privelege escalation)

Можно послать DDE сообщение из другого приложения чтобы выполнить команду с привилегиями пользователя mIRC...

mIRC bug?

Hello, BugTraq readers! I have recently started using mIRC's DDE feature, which allows DDE messaging between its instances and other software. At first I was quite pleased with this feature until I thought about the security implications of it under a multi-user system such as Windows 2000...

CVE-2001-0944

DDE in mIRC allows local users to launch applications under another user's account via a DDE message that executes a command, which may be executed by the other user's process...

CVE-2001-0315

The locking feature in mIRC 5.7 allows local users to bypass the password mechanism by modifying the LockOptions registry key...

Дырка в mirc ( : buffer overflow)

Переполнение буфера при использовании символов ':' в не которых командах...

Fw: [net-com] Bug in Mirc v5.82

----- Original Message ----- From: Trax [email protected] To: opers-xnet [email protected] Cc: net-com-xnet [email protected] Sent: Sunday, April 22, 2001 1:40 PM Subject: net-com Bug in Mirc v5.82 There is a bug in mirc v5.82 that allows remote control of clients via /quote and /ctcp not the ctcp...

CVE-2001-0315

CVE-2001-0315 affects mIRC 5.7. The vulnerability arises from the locking feature, where local users can bypass the password mechanism by modifying the LockOptions registry key. Exploitation requires local access; the CVSS base score is 7.5 (HIGH) with partial impacts to confidentiality, integrit...

CVE-2001-0315

The locking feature in mIRC 5.7 allows local users to bypass the password mechanism by modifying the LockOptions registry key...

CVE-2001-0315: Undefined Security Weakness

The locking feature in mIRC 5.7 allows local users to bypass the password mechanism by modifying the LockOptions registry key...

ide_expl.mrc

; ideexpl.mrc: vade79 - [email protected], www.fakehalo.org. ; ; ircii-4-4 exploit-ported to mirc5.7, works reverse to ircii-4.4.c. You send the chat ; request instead of having them chat you, result is the same. ; ; Wrote directly from ircii-4.4.cfor nix, that someone gave me to port to mirc. ; ...

CVE-1999-0399

CVE-1999-0399 affects the Mirc 5.5 client via the DCC server command , where character filtering in file names is insufficient. This can allow a remote attacker to place a malicious file in a different location, possibly enabling command execution. The available connected documents confirm the vu...

CVE-1999-0399

The DCC server command in the Mirc 5.5 client doesn't filter characters from file names properly, allowing remote attackers to place a malicious file in a different location, possibly allowing the attacker to execute commands...

CVE-1999-0399: Undefined Security Weakness

The DCC server command in the Mirc 5.5 client doesn't filter characters from file names properly, allowing remote attackers to place a malicious file in a different location, possibly allowing the attacker to execute commands...

ircn.txt

Date: Thu, 23 Jul 1998 22:57:46 +0000 From: Benoit Lefebvre Subject: Re: Backdoor in ircN, popular mIRC script. The bug is not only in ircN It is in mIRC. The problem is $calc.. ircN is just one of the script who use $calc to check the ping delay eg: on 1:CTCPREPLY:PING: echo -a Ping reply:...

mirc.5.6.autoload.url.txt

Date: Tue, 8 Jun 1999 22:49:35 -0400 From: Rich Lafferty To: [email protected] Subject: mIRC 5.6 automatic URL loading This one stunned me. I triple-checked and tested more than I'd usually test because I can't believe anyone would implement something so ridiculous. Perhaps I'm just optimistic...

FPSC-IRCD.txt

The FPSC-IRCD.txt advisory. --------------------------- By: syg of the FPSC @3/7/98 [email protected] http://FPSC.hemp.net Program affected: IRCD Versions affected: All hybrid and other EFnet IRCD versions. Probably others. Problem: According to the date of this file, thier is a few bugs in hybr...

mirc-hidden-files.txt

Date: Sat, 2 Jan 1999 06:15:04 -0500 From: Locke Nash Cole To: [email protected] Subject: Re: Win32 ICQ 98a flaw You can also do this in the popular mIRC IRC Client, althou it has no "Open" option so there is a less chance of the person running it, however in explorer "mypic..bmp .exe" Kinda...

CVE-1999-0399

The DCC server command in the Mirc 5.5 client doesn't filter characters from file names properly, allowing remote attackers to place a malicious file in a different location, possibly allowing the attacker to execute commands...

PT-1999-1085 · Mirc · Mirc

Name of the Vulnerable Software and Affected Versions: Mirc version 5.5 Description: The issue concerns a problem with the DCC server command in the Mirc client, where it fails to properly filter characters from file names. This allows remote attackers to potentially place a malicious file in a...