CVE-2009-0661

WeeChat 0.2.6 contains a denial-of-service vulnerability: a remote attacker can crash the client by sending a crafted PRIVMSG with color codes, triggering an out-of-bounds read in the colored message handling. Advisories (Gentoo GLSA 200904-04, Fedora advisories FEDORA-2009-2859/2861, Gentoo GLSA...

CVE-2009-0661: Improper Input Validation

Wee Enhanced Environment for Chat WeeChat 0.2.6 allows remote attackers to cause a denial of service crash via an IRC PRIVMSG command containing crafted color codes that trigger an out-of-bounds read...

Debian: Security Advisory (DSA-1744-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Weechat IRC client DoS

Crash on PRIVMSG parsing...

[SECURITY] [DSA 1744-1] New weechat packages fix denial of service

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA-1744-1 [email protected] http://www.debian.org/security/ Nico Golde March 18th, 2009 http://www.debian.org/security/faq -...

Debian DSA-1744-1 : weechat - missing input sanitization

Sebastien Helleu discovered that an error in the handling of color codes in the weechat IRC client could cause an out-of-bounds read of an internal color array. This can be used by an attacker to crash user clients via a crafted PRIVMSG command. The weechat version in the oldstable distribution...

[SECURITY] [DSA 1744-1] New weechat packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA-1744-1 [email protected] http://www.debian.org/security/ Nico Golde March 18th, 2009 http://www.debian.org/security/faq -...

DSA-1744-1 weechat - denial of service

Bulletin has no description...

CVE-2007-4398

Multiple CRLF injection vulnerabilities in the 1 now-playing.rb and 2 xmms.pl 1.1 scripts for WeeChat allow user-assisted remote attackers to execute arbitrary IRC commands via CRLF sequences in the name of the song in a .mp3 file...

CVE-2007-4398

Multiple CRLF injection vulnerabilities in the 1 now-playing.rb and 2 xmms.pl 1.1 scripts for WeeChat allow user-assisted remote attackers to execute arbitrary IRC commands via CRLF sequences in the name of the song in a .mp3 file...

DEBIAN-CVE-2007-4398

Multiple CRLF injection vulnerabilities in the 1 now-playing.rb and 2 xmms.pl 1.1 scripts for WeeChat allow user-assisted remote attackers to execute arbitrary IRC commands via CRLF sequences in the name of the song in a .mp3 file...

CVE-2007-4398

Multiple CRLF injection vulnerabilities in the 1 now-playing.rb and 2 xmms.pl 1.1 scripts for WeeChat allow user-assisted remote attackers to execute arbitrary IRC commands via CRLF sequences in the name of the song in a .mp3 file...

Crlf injection

Multiple CRLF injection vulnerabilities in the 1 now-playing.rb and 2 xmms.pl 1.1 scripts for WeeChat allow user-assisted remote attackers to execute arbitrary IRC commands via CRLF sequences in the name of the song in a .mp3 file...

CVE-2007-4398

Multiple CRLF injection vulnerabilities in the 1 now-playing.rb and 2 xmms.pl 1.1 scripts for WeeChat allow user-assisted remote attackers to execute arbitrary IRC commands via CRLF sequences in the name of the song in a .mp3 file...

CVE-2007-4398

Multiple CRLF injection vulnerabilities in the 1 now-playing.rb and 2 xmms.pl 1.1 scripts for WeeChat allow user-assisted remote attackers to execute arbitrary IRC commands via CRLF sequences in the name of the song in a .mp3 file...

CVE-2007-4398

CVE-2007-4398 affects WeeChat scripts now-playing.rb and xmms.pl 1.1. Multiple CRLF injection vulnerabilities allow user-assisted remote attackers to execute arbitrary IRC commands via CRLF sequences in the name field of a .mp3 file. Root cause: CRLF injection in parsing/handling of the song name...

CVE-2007-4398: Undefined Security Weakness

Multiple CRLF injection vulnerabilities in the 1 now-playing.rb and 2 xmms.pl 1.1 scripts for WeeChat allow user-assisted remote attackers to execute arbitrary IRC commands via CRLF sequences in the name of the song in a .mp3 file...