CVE-2002-1967

XiRCON 1.0 Beta 4 is affected by a buffer overflow that can be triggered remotely via overly long (ctcp, primsg, msg, notice) commands, causing denial of service (disconnect). The provided documents describe the impact but do not include exploit details or a patch. Affected component: XiRCON 1.0 ...

CVE-2004-1231

CVE-2004-1231 is a directory traversal vulnerability in Gadu-Gadu, allowing remote attackers to read arbitrary files via ".." sequences in a DCC/CTCP packet (type=1, subtype=4). The NVD entry confirms the vulnerability but provides no patch details in the connected documents. Impact is read acces...

CVE-2004-1230

Gadu-Gadu allows remote attackers to gain sensitive information and read files from the cache directory of other users via a DCC connection and a CTCP packet that contains a 1 as the type and a 4 as the subtype...

CVE-2004-1231

Directory traversal vulnerability in Gadu-Gadu allows remote attackers to read arbitrary files via .. dot dot sequences in a DCC connection with a CTCP packet that contains a 1 as the type and a 4 as the subtype...

CVE-2004-1230

CVE-2004-1230 pertains to the Gadu-Gadu client. A remote attacker can exploit a DCC connection and a CTCP packet with type=1, subtype=4 to read files from another user’s _cache directory and obtain sensitive information. The vulnerability affects Gadu-Gadu as described in public records; the core...

XChat CTCP Ping Arbitrary Remote IRC Command Execution

Binary data 1875.prm...

Mandrake Linux Security Advisory : xchat (MDKSA-2002:006)

zen-parse discovered a problem in versions 1.4.2 and 1.4.3 of xchat that could allow a malicious user to send commands to the IRC server they are on which would take advantage of the CTCP PING reply handler in xchat. This could be used for denial of service, channel takeovers, and other similar...

epic buffer overflow

DoS on oversized CTCP nickname...

Epic 1.0.11.0.x - CTCP Nickname Server Message Buffer Overrun

Epic 1.0.11.0.x - CTCP Nickname Server Message Buffer Overrun // source: https://www.securityfocus.com/bid/8999/info A remotely exploitable buffer overrun has been reported in Epic. This issue may reportedly be exploited by a malicious server that supplies an overly long nickname in a CTCP...

Epic 1.0.1/1.0.x - CTCP Nickname Server Message Buffer Overrun

// source: https://www.securityfocus.com/bid/8999/info A remotely exploitable buffer overrun has been reported in Epic. This issue may reportedly be exploited by a malicious server that supplies an overly long nickname in a CTCP messages, potentially allowing for execution of arbitrary code in th...

Trillian v.0.74* Remote DoS

Advisory Название : Trillian v.0.74 - удаленная DoS Сайт : www.trillian.cc Платформа : win32 Автор : lobsta/h [email protected] Информация о программном продукте Trillian - популярный чат-клиент, поддерживающий IRC, AIM, ICQ, MSN Messenger, и Yahoo! Messenger. Примечание к статье Основным отличие...

Trillian DoS

NULL pointer reference on large number of ctcp reply packets...

CVE-2003-0328

EPIC IRC Client EPIC4 pre2.002, pre2.003, and possibly later versions, allows remote malicious IRC servers to cause a denial of service crash and possibly execute arbitrary code via a CTCP request from a large nickname, which causes an incorrect length calculation...

DEBIAN-CVE-2003-0323

Multiple buffer overflows in ircII 20020912 allows remote malicious IRC servers to cause a denial of service crash and possibly execute arbitrary code via responses that are not properly fed to the mystrcat function by 1 ctcpbuffer, 2 cannotjoinchannel, 3 statusmakeprintable for Statusbar drawing...

CVE-2003-0328

EPIC IRC Client EPIC4 pre2.002, pre2.003, and possibly later versions, allows remote malicious IRC servers to cause a denial of service crash and possibly execute arbitrary code via a CTCP request from a large nickname, which causes an incorrect length calculation...

CVE-2002-0006

Vulnerability summary (CVE-2002-0006) : XChat versions 1.8.7 and earlier (including default configurations of 1.4.2 and 1.4.3) are vulnerable. A remote attacker can execute arbitrary IRC commands as another client by sending specially encoded characters in a PRIVMSG that calls CTCP PING, which ca...

X-Chat 1.x - CTCP Ping Remote IRC Command Execution

X-Chat 1.x - CTCP Ping Remote IRC Command Execution source: https://www.securityfocus.com/bid/3830/info X-Chat is a graphical client for IRC. It requires the GTK+ toolkit, and is available for many Linux and Unix operating systems. If a CTCP ping request includes escaped newline characters and...

X-Chat 1.x - CTCP Ping Remote IRC Command Execution

source: https://www.securityfocus.com/bid/3830/info X-Chat is a graphical client for IRC. It requires the GTK+ toolkit, and is available for many Linux and Unix operating systems. If a CTCP ping request includes escaped newline characters and additional IRC commands, these commands may be execute...