CVE-2007-3837: Undefined Security Weakness

Heap-based buffer overflow in HydraIRC 0.3.151 allows remote IRC servers to cause a denial of service application crash via a long CTCP request message containing '%' percent characters...

Design/Logic Flaw

Cerulean Studios Trillian Pro before 3.1.5.1 allows remote attackers to obtain potentially sensitive information via long CTCP PING messages that contain UTF-8 characters, which generates a malformed response that is not truncated by a newline, which can cause portions of a server message to be...

CVE-2007-2479

Cerulean Studios Trillian Pro before 3.1.5.1 allows remote attackers to obtain potentially sensitive information via long CTCP PING messages that contain UTF-8 characters, which generates a malformed response that is not truncated by a newline, which can cause portions of a server message to be...

CVE-2007-2479: Exposure of Sensitive Information to an Unauthorized Actor

Cerulean Studios Trillian Pro before 3.1.5.1 allows remote attackers to obtain potentially sensitive information via long CTCP PING messages that contain UTF-8 characters, which generates a malformed response that is not truncated by a newline, which can cause portions of a server message to be...

CVE-2007-2479

Cerulean Studios Trillian Pro before 3.1.5.1 allows remote attackers to obtain potentially sensitive information via long CTCP PING messages that contain UTF-8 characters, which generates a malformed response that is not truncated by a newline, which can cause portions of a server message to be...

iDefense Security Advisory 04.30.07: Cerulean Studios Trillian Multiple IRC Vulnerabilities

Cerulean Studios Trillian Multiple IRC Vulnerabilities iDefense Security Advisory 04.30.07 http://labs.idefense.com/intelligence/vulnerabilities/ Apr 30, 2007 I. BACKGROUND Cerulean Studios Trillian is a multi-protocol chat application that supports IRC, ICQ, AIM and MSN protocols. More informati...

CVE-2007-1502: Undefined Security Weakness

Multiple buffer overflows in Rhapsody IRC 0.28b allow remote attackers to execute arbitrary code via a 1 long command, 2 long server argument to the a connect or b server commands, 3 long nick argument to the c nick command, or a long 4 nick or 5 message argument to the d ctcp, e chat, f notice, ...

Rhapsody IRC 0.28b (NICK) Multiple fs and bof vulnerability

Rhapsody IRC 0.28b NICK Multiple fs and bof vulnerability Description: Rhapsody is a text console IRC client for Unix operating systems. It is small, fast, portable, easy to use and full featured. An intuitive menu-driven user interface makes rhapsody ideal for beginner to intermediate users. Fou...

Colloquy 2.1.3545 - 'INVITE' Format String Denial of Service

!/usr/bin/ruby c Copyright 2006 Lance M. Havok Makes use of the Colloquy INVITE format string vulnerability. require 'socket' targetchannel = ARGV0 || "whatever" targetserver = ARGV1 || "irc.server.org" targetport = ARGV2 || 6667 randnick = "spongebo" channeljoined = false readytogo = false...

CVE-2006-3293

parsenotice TiCPU in EnergyMech emech before 3.0.2 allows remote attackers to cause a denial of service crash via empty IRC CTCP NOTICE messages...

CVE-2006-3293

parsenotice TiCPU in EnergyMech emech before 3.0.2 allows remote attackers to cause a denial of service crash via empty IRC CTCP NOTICE messages...

CVE-2006-3293: Undefined Security Weakness

parsenotice TiCPU in EnergyMech emech before 3.0.2 allows remote attackers to cause a denial of service crash via empty IRC CTCP NOTICE messages...

EnergyMech IRC bot DoS

Crash on empty CTCP NOTICE message...

[Full-disclosure] Gadu-Gadu several vulnerabilities (version <= 7.20)

21/11/05 Gadu-Gadu instant messenger several vulnerabilities I. INTRODUCTION During the preparation of the materials about instant messengers security for the security conference we have checked current state of the Gadu-Gadu http://www.gadu-gadu.pl security. There was discovered a several new...

CVE-2002-1967

XiRCON 1.0 Beta 4 is affected by a buffer overflow that can be triggered remotely via overly long (ctcp, primsg, msg, notice) commands, causing denial of service (disconnect). The provided documents describe the impact but do not include exploit details or a patch. Affected component: XiRCON 1.0 ...

CVE-2002-1967: Undefined Security Weakness

Buffer overflow in XiRCON 1.0 Beta 4 allows remote attackers to cause a denial of service disconnect via a long 1 ctcp, 2 primsg, 3 msg, or 4 notice command...

CVE-2004-1231

CVE-2004-1231 is a directory traversal vulnerability in Gadu-Gadu, allowing remote attackers to read arbitrary files via ".." sequences in a DCC/CTCP packet (type=1, subtype=4). The NVD entry confirms the vulnerability but provides no patch details in the connected documents. Impact is read acces...

CVE-2004-1230

CVE-2004-1230 pertains to the Gadu-Gadu client. A remote attacker can exploit a DCC connection and a CTCP packet with type=1, subtype=4 to read files from another user’s _cache directory and obtain sensitive information. The vulnerability affects Gadu-Gadu as described in public records; the core...

CVE-2004-1231

Directory traversal vulnerability in Gadu-Gadu allows remote attackers to read arbitrary files via .. dot dot sequences in a DCC connection with a CTCP packet that contains a 1 as the type and a 4 as the subtype...

CVE-2004-1230

Gadu-Gadu allows remote attackers to gain sensitive information and read files from the cache directory of other users via a DCC connection and a CTCP packet that contains a 1 as the type and a 4 as the subtype...