137 matches found
CVE-2008-5657
CRLF injection vulnerability in Quassel Core before 0.3.0.3 allows remote attackers to spoof IRC messages as other users via a crafted CTCP message...
Crlf injection
CRLF injection vulnerability in Quassel Core before 0.3.0.3 allows remote attackers to spoof IRC messages as other users via a crafted CTCP message...
CVE-2008-5657
CRLF injection vulnerability in Quassel Core before 0.3.0.3 allows remote attackers to spoof IRC messages as other users via a crafted CTCP message...
CVE-2008-5657: Improper Input Validation
CRLF injection vulnerability in Quassel Core before 0.3.0.3 allows remote attackers to spoof IRC messages as other users via a crafted CTCP message...
Fedora 9 : quassel-0.3.0.3-1.fc9 (2008-9658)
New upstream release fixes a security issue with CTCP handling in Quassel Core, that could potentially be exploited to send arbitrary IRC commands on your behalf. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable h...
Quassel IRC client command injection
A CTCP ping where the value contains a CTCP quoted newline '020' + 'n' will let the Quassel core reply with a message containing an unquoted newline 'n'. The IRC server interprets this as a command separator...
Quassel IRC: connection hijacking
Quassel IRC http://quassel-irc.org/ is "a modern, cross-platform, distributed IRC client". A vulnerability in the CTCP handling allows an attacker to trick Quassel IRC into sending arbitrary commands to the IRC server. This can be used by an attacker for example to gain operator privileges on a...
CVE-2008-4246
Unspecified vulnerability in Denora IRC Stats Server before 1.4.1 allows remote IRC servers to cause a denial of service application crash via a crafted CTCP response...
Design/Logic Flaw
Unspecified vulnerability in Denora IRC Stats Server before 1.4.1 allows remote IRC servers to cause a denial of service application crash via a crafted CTCP response...
CVE-2008-4246: Undefined Security Weakness
Unspecified vulnerability in Denora IRC Stats Server before 1.4.1 allows remote IRC servers to cause a denial of service application crash via a crafted CTCP response...
CVE-2007-4411
ircu 2.10.12.05 and earlier allows remote attackers to discover the hidden IP address of arbitrary +x users via a series of /silence commands with 1 CIDR mask arguments or 2 certain other arguments that represent groups of IP addresses, then monitoring CTCP ping replies...
Design/Logic Flaw
ircu 2.10.12.05 and earlier allows remote attackers to discover the hidden IP address of arbitrary +x users via a series of /silence commands with 1 CIDR mask arguments or 2 certain other arguments that represent groups of IP addresses, then monitoring CTCP ping replies...
DEBIAN-CVE-2007-4411
ircu 2.10.12.05 and earlier allows remote attackers to discover the hidden IP address of arbitrary +x users via a series of /silence commands with 1 CIDR mask arguments or 2 certain other arguments that represent groups of IP addresses, then monitoring CTCP ping replies...
CVE-2007-4411
ircu 2.10.12.05 and earlier allows remote attackers to discover the hidden IP address of arbitrary +x users via a series of /silence commands with 1 CIDR mask arguments or 2 certain other arguments that represent groups of IP addresses, then monitoring CTCP ping replies...
CVE-2007-4411
ircu 2.10.12.05 and earlier allows remote attackers to discover the hidden IP address of arbitrary +x users via a series of /silence commands with 1 CIDR mask arguments or 2 certain other arguments that represent groups of IP addresses, then monitoring CTCP ping replies...
CVE-2007-4411
ircu 2.10.12.05 and earlier allows remote attackers to discover the hidden IP address of arbitrary +x users via a series of /silence commands with 1 CIDR mask arguments or 2 certain other arguments that represent groups of IP addresses, then monitoring CTCP ping replies...
CVE-2007-4411: Undefined Security Weakness
ircu 2.10.12.05 and earlier allows remote attackers to discover the hidden IP address of arbitrary +x users via a series of /silence commands with 1 CIDR mask arguments or 2 certain other arguments that represent groups of IP addresses, then monitoring CTCP ping replies...
Heap overflow
Heap-based buffer overflow in HydraIRC 0.3.151 allows remote IRC servers to cause a denial of service application crash via a long CTCP request message containing '%' percent characters...