145 matches found
IRC bot detection
This host seems to be running an ident server, but before any request is sent, the server gives an answer about a connection to port 6667. SPDX-FileCopyrightText: 2005 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...
FreeBSD : ngircd -- format string vulnerability (bc4a7efa-7d9a-11d9-a9e7-0001020eed82)
A No System Group security advisory reports that ngircd is vulnerable to a format string vulnerability in the LogResolver function of log.c, if IDENT support is enabled. This could allow a remote attacker to execute arbitrary code with the permissions of the ngircd daemon, which is root by defaul...
IRC Bot Detection
This host seems to be running an ident server, but before any request is sent, the server gives an answer about a connection to port 6667. It is very likely this system has been compromised by an IRC bot and is now a 'zombie' that can participate in 'distributed denial of service' DDoS attacks...
ngircd -- format string vulnerability
A No System Group security advisory reports that ngircd is vulnerable to a format string vulnerability in the LogResolver function of log.c, if IDENT support is enabled. This could allow a remote attacker to execute arbitrary code with the permissions of the ngircd daemon, which is root by defaul...
ngIRCd <= 0.8.2 Remote Format String Exploit
Exploit for linux platform in category remote exploits ============================================ ngIRCd Use: ./ngircdfsexp -h options options: -h host or IP -p ircd port by default 6667 -t type of target system -g syslog GOT address -o offset RET addr by default 0x0806b000 -b brutefoce the RET...
ngIRCd <= 0.8.2 Remote Format String Exploit
No description provided by source. / ngircdfsexp.c ngIRCd = 0.8.2 remote format string exploit Note: To obtain a successful exploitation, we need that ngIRCd has been compiled with IDENT, logging to SYSLOG and DEBUG enabled. Original Reference: http://www.nosystem.com.ar/advisories/advisory-11.tx...
ngIRCd 0.8.2 - Remote Format String
/ ngircdfsexp.c ngIRCd Use: ./ngircdfsexp -h options options: -h host or IP -p ircd port by default 6667 -t type of target system -g syslog GOT address -o offset RET addr by default 0x0806b000 -b brutefoce the RET address from 0x0806b000 + offset -l targets list root@servidor:/home/coki/audit...
DEBIAN-CVE-2004-0408
Buffer overflow in the childservice function in the ident2 ident daemon allows remote attackers to execute arbitrary code...
CVE-2004-0408
Buffer overflow in the childservice function in the ident2 ident daemon allows remote attackers to execute arbitrary code...
CVE-2004-0408
Buffer overflow in the childservice function in the ident2 ident daemon allows remote attackers to execute arbitrary code...
IRC Bot ident Server Detection
This host seems to be running an ident server, but the ident server responds to an empty query with a random userid. This behavior may be indicative of an IRC bot, worm and/or virus infection. It is very likely this system has been compromised. IRC bot ident server detection Created: 9/22/04 Last...
CVE-2004-0408
Buffer overflow in the childservice function in the ident2 ident daemon allows remote attackers to execute arbitrary code...
CVE-2004-0408
CVE-2004-0408 describes a buffer overflow in the ident2 daemon’s child_service function, enabling remote code execution. The vulnerability arises because a buffer is slightly too small to hold incoming data, allowing an attacker to overflow and potentially execute arbitrary code with the ident2 p...
DSA-494 ident2 - buffer overflow
Bulletin has no description...
GNU Anubis buffer overflows and format string vulnerabilities
Ulf Härnhammar discovered several vulnerabilities in GNU Anubis. Unsafe uses of sscanf'. The %s' format specifier is used, which allows a classical buffer overflow. auth.c Format string bugs invoking syslog'. log.c, errs.c, ssl.c Ulf notes that these vulnerabilities can be exploited by a maliciou...
sendmail 8.12.8 available
-----BEGIN PGP SIGNED MESSAGE----- Sendmail, Inc., and the Sendmail Consortium announce the availability of sendmail 8.12.8. It contains a fix for a critical security problem discovered by Mark Dowd of ISS X-Force; we thank ISS X-Force for bringing this problem to our attention. Sendmail urges al...
CVE-2002-2390
Buffer overflow in the IDENT daemon identd in Trillian 0.6351, 0.725, 0.73, 0.74 and 1.0 pro allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long request...
CVE-2002-2423
Sendmail 8.12.0 through 8.12.6 truncates log messages longer than 100 characters, which allows remote attackers to prevent the IP address from being logged via a long IDENT response...
Trillian .74 and below, ident flaw.
Discovered: ----------- 03 September 2002 By Me, Lance Fitz-Herbert aka phrizer. Vulnerable Applications: ------------------------ Tested On Trillian .74 and .73, But im guessing older versions are also vulnerable. Impact: ------- Low-High. This could allow arbitary code to be executed on the...
Trillian 0.63510.7x - Identd Buffer Overflow
Trillian 0.63510.7x - Identd Buffer Overflow // source: https://www.securityfocus.com/bid/5733/info Trillian ships with an ident server to facilitate connections to IRC servers that require an ident response before allowing access. A buffer overflow condition exists in the Trillian ident server,...