Slackware: Security Advisory (SSA:2003-141-02)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mandrake Linux Security Advisory : BitchX (MDKSA-2000:017)

A denial of service vulnerability exists in BitchX. Improper handling of incoming invitation messages can crash the client. Any user on IRC can send the client an invitation message that causes BitchX to segfault. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and packa...

Mandrake Linux Security Advisory : BitchX (MDKSA-2000:079)

Two bugs exist in the BitchX IRC client. A possible stack overflow condition exists if a malformed DNS answer is processed by the client, and the second bug allows this malformed DNS record to be embedded in a valid DNS packet. Without the second bug, the malformed DNS record wouldn't be processe...

bitchx EOLed in Slackware

This is a notice that bitchx, an IRC client based on ircii-EPIC4, has been removed from Slackware -current and will not be part of future Slackware releases. Security issues and bugs have been reported, but upstream work seems to have stalled leaving bitchx in a state where there are known proble...

Gentoo Security Advisory GLSA 200807-12 (bitchx)

The remote host is missing updates announced in advisory GLSA 200807-12. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Gentoo Security Advisory GLSA 200807-12 (bitchx)

The remote host is missing updates announced in advisory GLSA 200807-12. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

GLSA-200807-12 : BitchX: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200807-12 BitchX: Multiple vulnerabilities bannedit reported a boundary error when handling overly long IRC MODE messages CVE-2007-4584. Nico Golde reported an insecure creation of a temporary file within the ehostname function...

Debian: Security Advisory (DSA-306)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 307-1 (ircii-pana)

The remote host is missing an update to ircii-pana announced via advisory DSA 307-1. OpenVAS Vulnerability Test $Id: deb3071.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 307-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

CVE-2007-5922

The modules/mdop.m in the Cypress 1.0k script for BitchX, as downloaded from a distribution site in November 2007, contains an externally introduced backdoor that e-mails sensitive information hostnames, usernames, and shell history to a fixed address...

Information disclosure

The modules/mdop.m in the Cypress 1.0k script for BitchX, as downloaded from a distribution site in November 2007, contains an externally introduced backdoor that e-mails sensitive information hostnames, usernames, and shell history to a fixed address...

CVE-2007-5922

The modules/mdop.m in the Cypress 1.0k script for BitchX, as downloaded from a distribution site in November 2007, contains an externally introduced backdoor that e-mails sensitive information hostnames, usernames, and shell history to a fixed address...

CVE-2007-5922

The CVE-2007-5922 entry refers to the Cypress 1.0k script for BitchX, where the modules/mdop.m file contains an externally introduced backdoor that emails sensitive information (hostnames, usernames, shell history) to a fixed address. The available documents confirm the backdoor presence and the ...

Command injection

The ehostname function in commands.c in BitchX 1.1a allows local users to overwrite arbitrary files via a symlink attack on temporary files when using the 1 HOSTNAME or 2 IRCHOST command...

CVE-2007-5839

The ehostname function in commands.c in BitchX 1.1a allows local users to overwrite arbitrary files via a symlink attack on temporary files when using the 1 HOSTNAME or 2 IRCHOST command...

CVE-2007-5839

The ehostname function in commands.c in BitchX 1.1a allows local users to overwrite arbitrary files via a symlink attack on temporary files when using the 1 HOSTNAME or 2 IRCHOST command...

CVE-2007-5839

The ehostname function in commands.c in BitchX 1.1a allows local users to overwrite arbitrary files via a symlink attack on temporary files when using the 1 HOSTNAME or 2 IRCHOST command...

CVE-2007-5839

CVE-2007-5839 affects BitchX 1.1a: the e_hostname function in commands.c allows local users to overwrite arbitrary files via a symlink attack on temporary files when using the (1) HOSTNAME or (2) IRCHOST command. Root cause described as insecure temporary-file creation (tmpnam). Impact stated: lo...

CVE-2003-1450

BitchX 75p3 and 1.0c16 through 1.0c20cvs allows remote attackers to cause a denial of service segmentation fault via a malformed RPLNAMREPLY numeric 353 message...

CVE-2003-1450

CVE-2003-1450 affects BitchX IRC client versions 75p3 and 1.0c16–1.0c20cvs. The issue allows remote attackers to cause a denial of service (segmentation fault) by sending a malformed RPL_NAMREPLY numeric 353 message. The connected sources confirm the vulnerable component and the impact but do not...