USN-1200-1: Quassel vulnerability

It was discovered that Quassel did not properly handle CTCP requests. A remote attacker could exploit this to cause a denial of service via application crash...

CVE-2011-3354

The CtcpParser::packedReply method in core/ctcpparser.cpp in Quassel before 0.7.3 allows remote attackers to cause a denial of service crash via a crafted Client-To-Client Protocol CTCP request, as demonstrated in the wild in September 2011...

Ubuntu Update for quassel vulnerability USN-991-1

Ubuntu Update for Linux kernel vulnerabilities USN-991-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN9911.nasl 7965 2017-12-01 07:38:25Z santu $ Ubuntu Update for quassel vulnerability USN-991-1 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH,...

Ubuntu 9.04 / 9.10 / 10.04 LTS : quassel vulnerability (USN-991-1)

Jima discovered that quassel would respond to a single privmsg containing multiple CTCP requests with multiple NOTICEs, possibly resulting in a denial of service against the IRC connection. Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu...

USN-991-1: quassel vulnerability

Jima discovered that quassel would respond to a single privmsg containing multiple CTCP requests with multiple NOTICEs, possibly resulting in a denial of service against the IRC connection...

openSUSE Security Update : kvirc (openSUSE-SU-2010:0459-1)

This update of kvirc does not further allow remote client to send arbitrary CTCP commands. CVE-2010-2785 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update kvirc-2860. The text description of thi...

CVE-2010-2785

The IRC Protocol component in KVIrc 3.x and 4.x before r4693 does not properly handle \ backslash characters, which allows remote authenticated users to execute arbitrary CTCP commands via vectors involving \r and \40 sequences, a different vulnerability than CVE-2010-2451 and CVE-2010-2452...

Design/Logic Flaw

The IRC Protocol component in KVIrc 3.x and 4.x before r4693 does not properly handle \ backslash characters, which allows remote authenticated users to execute arbitrary CTCP commands via vectors involving \r and \40 sequences, a different vulnerability than CVE-2010-2451 and CVE-2010-2452...

CVE-2010-2785

Summary: CVE-2010-2785 affects the KVIrc IRC Protocol component. Affected versions: KVIrc 3.x and 4.x before r4693. Vulnerability: improper handling of backslash sequences in CTCP commands, enabling remote authenticated users to execute arbitrary CTCP commands via vectors involving \r and \40. Th...

CVE-2010-2785: Undefined Security Weakness

The IRC Protocol component in KVIrc 3.x and 4.x before r4693 does not properly handle \ backslash characters, which allows remote authenticated users to execute arbitrary CTCP commands via vectors involving \r and \40 sequences, a different vulnerability than CVE-2010-2451 and CVE-2010-2452...

KVIrc 4.0 - '\r' Carriage Return in DCC Handshake Remote Command Execution

source: https://www.securityfocus.com/bid/42026/info KVIrc is prone to a remote command-execution vulnerability because the application fails to sufficiently sanitize user-supplied input. Exploiting this issue can allow an attacker to execute arbitrary commands within the context of the affected...

Cisco IOS multiple security vulnerabilities

Multiple DoS conditions in TCP, cTCP, Mobile IP/Mobile IPv6, WebVPN, SSLVPN implementations, SCP privilege escalation...

Cisco IOS cTCP协议远程拒绝服务漏洞

BUGTRAQ ID: 34246 CVECAN ID: CVE-2009-0635 Cisco IOS是思科网络设备所使用的互联网操作系统。 在配置为Easy VPN服务器的Cisco IOS设备上，如果启用了Cisco隧道控制协议（cTCP）封装功能，则一系列TCP报文可能导致设备耗尽内存。 Cisco IOS 12.4 厂商补丁： Cisco ----- Cisco已经为此发布了一个安全公告（cisco-sa-20090325-ctcp）以及相应补丁: cisco-sa-20090325-ctcp：Cisco IOS cTCP Denial of Service...

CVE-2009-0635

Memory leak in the Cisco Tunneling Control Protocol cTCP encapsulation feature in Cisco IOS 12.4, when an Easy VPN aka EZVPN server is enabled, allows remote attackers to cause a denial of service memory consumption and device crash via a sequence of TCP packets...

Design/Logic Flaw

Memory leak in the Cisco Tunneling Control Protocol cTCP encapsulation feature in Cisco IOS 12.4, when an Easy VPN aka EZVPN server is enabled, allows remote attackers to cause a denial of service memory consumption and device crash via a sequence of TCP packets...

CVE-2009-0635

Cisco IOS devices configured as EZVPN servers using the cTCP encapsulation feature are vulnerable to a memory exhaustion DoS caused by a crafted sequence of TCP packets. This affects Cisco IOS releases 12.4(9)T and later; Cisco has published fixes in updated software and recommends upgrading to a...

CVE-2009-0635

Memory leak in the Cisco Tunneling Control Protocol cTCP encapsulation feature in Cisco IOS 12.4, when an Easy VPN aka EZVPN server is enabled, allows remote attackers to cause a denial of service memory consumption and device crash via a sequence of TCP packets...

CVE-2009-0635: Undefined Security Weakness

Memory leak in the Cisco Tunneling Control Protocol cTCP encapsulation feature in Cisco IOS 12.4, when an Easy VPN aka EZVPN server is enabled, allows remote attackers to cause a denial of service memory consumption and device crash via a sequence of TCP packets...

Cisco Security Advisory: Cisco IOS cTCP Denial of Service Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco IOS cTCP Denial of Service Vulnerability Advisory ID: cisco-sa-20090325-ctcp http://www.cisco.com/warp/public/707/cisco-sa-20090325-ctcp.shtml Revision 1.0 For Public Release 2009 March 25 1600 UTC GMT -...

Cisco IOS cTCP Denial of Service Vulnerability

THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES TH...