BitchX 1.0 - Remote 'Send_CTCP()' Memory Corruption

// source: https://www.securityfocus.com/bid/7097/info A memory corruption vulnerability has been discovered in BitchX 1.0c19. This issue occurs when handling server-supplied data and may cause characters to be written to sensitive stack memory. As a result, it may be possible for a malicious IRC...

BitchX 1.0 - Remote Send_CTCP() Memory Corruption

BitchX 1.0 - Remote SendCTCP Memory Corruption // source: https://www.securityfocus.com/bid/7097/info A memory corruption vulnerability has been discovered in BitchX 1.0c19. This issue occurs when handling server-supplied data and may cause characters to be written to sensitive stack memory. As a...

[argv] BitchX-353 Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Mon Feb 17 15:26:06 EST 2003 1. Topic: BitchX IRC Client 2. Relevant versions: Vulnerable: BitchX-75p3 BitchX-1.0c16 BitchX-1.0c19 BitchX-1.0c20cvs Not Vulnerable: BitchX-1.0c18 3. Problem description: A denial of service vulnerability exists in BitchX. Sending ...

BitchX 1.0 - 'RPL_NAMREPLY' Denial of Service

// source: https://www.securityfocus.com/bid/6880/info It has been reported that BitchX does not properly handle some types of replies contained in the RPLNAMREPLY numeric. When a malformed reply is received by the client, the client crashes, resulting in a denial of service. / bitchx-353.c --arg...

BitchX 1.0 - RPL_NAMREPLY Denial of Service

BitchX 1.0 - RPLNAMREPLY Denial of Service // source: https://www.securityfocus.com/bid/6880/info It has been reported that BitchX does not properly handle some types of replies contained in the RPLNAMREPLY numeric. When a malformed reply is received by the client, the client crashes, resulting i...

CVE-2001-0050

Buffer overflow in BitchX IRC client allows remote attackers to cause a denial of service and possibly execute arbitrary commands via an IP address that resolves to a long DNS hostname or domain name...

CVE-2001-0050

CVE-2001-0050 correlates to two bugs in the BitchX IRC client reported in MDKSA-2000:079. A stack overflow can occur when processing a malformed DNS answer, potentially enabling remote denial of service or arbitrary code execution, and a second bug allows embedding a malformed DNS record in a val...

CVE-2001-0050

Buffer overflow in BitchX IRC client allows remote attackers to cause a denial of service and possibly execute arbitrary commands via an IP address that resolves to a long DNS hostname or domain name...

FreeBSD-SA-00:78.bitchx

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-00:78 Security Advisory FreeBSD, Inc. Topic: bitchx/ko-bitchx allows remote code execution REVISED Category: ports Module: bitchx/ko-bitchx Announced: 2000-12-20 Reissued:...

Дырка в BitchX ircd (FQDN buffer overflow)

Переполнение буфера при слишком длинном FQDN-Имени хоста клиента...

BitchX DNS Overflow Patch

listed are two bugs in the BitchX irc client. a possible stack overflow condition exists if a malformed DNS answer is processed by the client. a second bug allows this malformed DNS record to be embedded in a valid DNS packet. without the second bug the malformed DNS record wouldn't be processed...

BitchX IRC Client 1.0 c17 - DNS Buffer Overflow

BitchX IRC Client 1.0 c17 - DNS Buffer Overflow // source: https://www.securityfocus.com/bid/2087/info BitchX is a popular Internet Relay Chat client, written by Colten Edwards. A problem exists which could potentially allow a user to access restricted resources. The problem occurs in the DNS...

BitchX IRC Client 1.0 c17 - DNS Buffer Overflow

// source: https://www.securityfocus.com/bid/2087/info BitchX is a popular Internet Relay Chat client, written by Colten Edwards. A problem exists which could potentially allow a user to access restricted resources. The problem occurs in the DNS resolution code. A buffer overflow within the...

CVE-2000-0594

CVE-2000-0594 affects the BitchX IRC client. The vulnerability arises from improper cleansing of an untrusted format string in the /INVITE command, allowing a remote attacker to trigger a denial of service by inviting a channel whose name includes special formatting characters. Connected document...

CVE-2000-0594

BitchX IRC client does not properly cleanse an untrusted format string, which allows remote attackers to cause a denial of service via an invite to a channel whose name includes special formatting characters...

Linux news 10.07.00

Linux Kernel pre-patch 2.4.0 test3-pre7 Вышел очередной пререлиз третьего тестового ядра Linux Kernel 2.4.0. Подробнее: ftp://ftp.funet.fi/pub/linux/kernel/testing mutt 1.2.4 Вышла новая версия крутой консольной читалки и писалки почты. Подробнее: http://www.mutt.org/ Ошибка в BitchX Просто Bitch...

bitchx.dos.txt

There's a small bug in the latest BitchX in which a nasty user can invite you to a channel with a %s in it, causing the client to coredump. As alot of channels/users on irc use the client, I felt I should post a notice about this problem. A small patch is available on www.bitchx.com/downloads.htm...

Дырка в BitchX

Ошибка форматной строки в команде /invite и /ignore потенциально позволяет выполнение кода и может быть исопльзована для DoS-атаки...

BitchX /ignore bug

I don't know whether this is the right place to put it, but i'm going to anyway : Because of a simple /invite nickname sssssssss, BitchX will segfault and coredump. This is a small programming error, you can find a patch at this location: http://root66.org/karin/BitchX-bug-patch-3-juli-2000.tar.g...

BitchX IRC Client 75p1/75p3/1.0 c16 - '/INVITE' Format String

// source: https://www.securityfocus.com/bid/1436/info BitchX IRC clients, versions 75 up to and including 1.0c16, are vulnerable to a Denial of Service and possible remote execution of code. By /invite-ing someone to a channel name containing formatting characters %s, %n, etc an IRC user can cau...