Vulnerability in multiple "now playing" scripts for various IRC clients

In October 2006 I discovered many "now playing" scripts for various IRC clients allow an attacker to send commands to the IRC server on behalf of the user. Details ======= Many scripts for various IRC clients, that report the name of the currently playing song in a media player on IRC share the...

virc-oday.txt

!/usr/bin/python ViRC 2.0 'JOIN Response' 0day Remote SEH Overwrite PoC Exploit Bug discovered by Krystian Kloskowski h07 Tested on Visual IRC 2.0 / 2k SP4 Polish Shellcode type: Windows Execute Command calc.exe How stuff works ? .. ViRC ----- ..JOIN.. ------------- exploittunnel...

ViRC 2.0 (JOIN Response) Remote SEH Overwrite Exploit 0day

Exploit for unknown platform in category remote exploits ========================================================== ViRC 2.0 JOIN Response Remote SEH Overwrite Exploit 0day ========================================================== !/usr/bin/python ViRC 2.0 'JOIN Response' 0day Remote SEH Overwri...

ViRC 2.0 - JOIN Response Remote Overwrite (SEH)

ViRC 2.0 - JOIN Response Remote Overwrite SEH !/usr/bin/python ViRC 2.0 'JOIN Response' 0day Remote SEH Overwrite PoC Exploit Bug discovered by Krystian Kloskowski h07 Tested on Visual IRC 2.0 / 2k SP4 Polish Shellcode type: Windows Execute Command calc.exe How stuff works ? .. ViRC ----- ..JOIN...

CVE-2007-2807

CVE-2007-2807 is a stack-based buffer overflow in Eggdrop (mod/server.mod/servmsg.c) affecting Eggdrop 1.6.18 and earlier, exploitable via a long private message to achieve remote code execution. Several connected sources (e.g., Debian DSA-1826, Fedora/Mandriva advisories) confirm a remote vulner...

ratvox IRC server DoS

Resource exhaustion by too many open connections...

Null pointer dereference

0irc 1345 build 20060823 allows remote attackers to cause a denial of service application crash by operating an IRC server that sends a long string to a client, which triggers a NULL pointer dereference...

CVE-2007-1648

0irc 1345 build 20060823 allows remote attackers to cause a denial of service application crash by operating an IRC server that sends a long string to a client, which triggers a NULL pointer dereference...

CVE-2007-1648

CVE-2007-1648 affects 0irc 1345 build 20060823. A remote attacker can cause an application crash by having the IRC server send a long string to a client, triggering a NULL pointer dereference (DoS). Root cause: NULL pointer dereference when processing oversized server messages. Impact: denial of ...

CVE-2007-1648: Undefined Security Weakness

0irc 1345 build 20060823 allows remote attackers to cause a denial of service application crash by operating an IRC server that sends a long string to a client, which triggers a NULL pointer dereference...

CVE-2007-1648

0irc 1345 build 20060823 allows remote attackers to cause a denial of service application crash by operating an IRC server that sends a long string to a client, which triggers a NULL pointer dereference...

USN-409-1: ksirc vulnerability

Federico L. Bossi Bonin discovered a Denial of Service vulnerability in ksirc. By sending a special response packet, a malicious IRC server could crash ksirc...

[KDE Security Advisory] ksirc Denial of Service vulnerability

KDE Security Advisory: ksirc denial of service vulnerability Original Release Date: 2007-01-09 URL: http://www.kde.org/info/security/advisory-20070109-1.txt 0. References CVE-2006-6811 http://www.milw0rm.com/exploits/3023 http://www.securityfocus.com/bid/21790 1. Systems affected: ksirc as shippe...

CVE-2006-6811

KsIRC 1.3.12 allows remote attackers to cause a denial of service crash via a long PRIVMSG string when connecting to an Internet Relay Chat IRC server, which causes an assertion failure and results in a NULL pointer dereference. NOTE: this issue was originally reported as a buffer overflow...

CVE-2006-6811

KsIRC 1.3.12 allows remote attackers to cause a denial of service crash via a long PRIVMSG string when connecting to an Internet Relay Chat IRC server, which causes an assertion failure and results in a NULL pointer dereference. NOTE: this issue was originally reported as a buffer overflow...

postnuke0750.txt

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 PostNuke SQL Injection 0.750=x cXIb8O3.5 Author: cXIb8O3 Date: 2.3.2005 from SecurityReason.Com - --- 0.Description --- PostNuke: The Phoenix Release 0.750 PostNuke is an open source, open developement content management system CMS. PostNuke started a...

IRC Server Detection

Binary data 3107.prm...

FreeBSD : bnc -- remotely exploitable buffer overflow in getnickuserhost (9be819c6-4633-11d9-a9e7-0001020eed82)

A LSS Security Advisory reports : There is a buffer overflow vulnerability in getnickuserhost function that is called when BNC is processing response from IRC server. Vulnerability can be exploited if attacker tricks user to connect to his fake IRC server that will exploit this vulnerability. If...

CVE-2005-0131

The Quick Connection dialog in Konversation 0.15 inadvertently uses the user-provided password as the nickname instead of the user-provided nickname when connecting to the IRC server, which could leak the password to other users...

CVE-2005-0131

The Quick Connection dialog in Konversation 0.15 inadvertently uses the user-provided password as the nickname instead of the user-provided nickname when connecting to the IRC server, which could leak the password to other users...