multiple remote denial of service vulnerabilities in Gaim

I. Synopsis Gaim http://gaim.sourceforge.net is a multi-protocol instant messaging client. I have identified several remote denial of service vulnerabilities affecting Gaim 1.2.0, and probably older versions as well. II. Problems 1. Buffer overread in gaimmarkupstriphtml A programming error in...

CVE-2004-1052

Buffer overflow in the getnickuserhost function in BNC 2.8.9, and possibly other versions, allows remote IRC servers to execute arbitrary code via an IRC server response that contains many 1 ! exclamation or 2 @ at sign characters...

CVE-2004-1716

CVE-2004-1716 is a cross-site scripting (XSS) vulnerability affecting PForum before 1.26 . The issue allows remote attackers to inject arbitrary web script or HTML through the IRC Server or AIM ID fields in the user profile. The connected documents confirm the affected component and vectors but d...

CVE-2004-1716: Undefined Security Weakness

Cross-site scripting XSS vulnerability in PForum before 1.26 allows remote attackers to inject arbitrary web script or HTML via the 1 IRC Server or 2 AIM ID fields in the user profile...

CVE-2005-0131

The CVE-2005-0131 entry concerns Konversation 0.15. The Quick Connection dialog erroneously uses the user’s password as the nickname when connecting to an IRC server, which can leak the password to other users. This is tied to the Konversation IRC client and stems from the login handling in the Q...

CVE-2005-0131: Undefined Security Weakness

The Quick Connection dialog in Konversation 0.15 inadvertently uses the user-provided password as the nickname instead of the user-provided nickname when connecting to the IRC server, which could leak the password to other users...

Debian DSA-595-1 : bnc - buffer overflow

Leon Juranic discovered that BNC, an IRC session bouncing proxy, does not always protect buffers from being overwritten. This could exploited by a malicious IRC server to overflow a buffer of limited size and execute arbitrary code on the client host. %NASLMINLEVEL 70300 C Tenable Network Securit...

CVE-2004-1052: Undefined Security Weakness

Buffer overflow in the getnickuserhost function in BNC 2.8.9, and possibly other versions, allows remote IRC servers to execute arbitrary code via an IRC server response that contains many 1 ! exclamation or 2 @ at sign characters...

BNC IRC Server Incorrect Password Authentication Bypass

The remote host is running a version of the BNC IRC proxy that contains a flaw in its authentication process that accepted only logins with incorrect passwords. An attacker may use this issue to gain access to the remote IRC proxy server. C Tenable Network Security, Inc. include"compat.inc";...

BNC < 2.9.1 getnickuserhost IRC Server Response Buffer Overflow

Binary data 2403.prm...

BNC IRC Server < 2.9.1 Authentication Bypass

Binary data 2404.prm...

bnc -- remotely exploitable buffer overflow in getnickuserhost

A LSS Security Advisory reports: There is a buffer overflow vulnerability in getnickuserhost function that is called when BNC is processing response from IRC server. Vulnerability can be exploited if attacker tricks user to connect to his fake IRC server that will exploit this vulnerability. If t...

Trillian IRC Server Response Remote Overflow

Binary data 1871.prm...

CGI:IRC Server Detection

Binary data 3530.prm...

Crackalaka IRC Server 1.0.8 - Remote Denial of Service

source: https://www.securityfocus.com/bid/10092/info It has been reported that Crackalaka may be prone to a remote denial of service vulnerability that may allow an attacker to crash the server by sending an excessive amount of data. Crackalaka version 1.0.8 is reported to be prone to this issue,...

DoS in Crackalaka 1.0.8

Donato Ferrante Application: Crackalaka http://www.stalphonsos.com/attila/crackalaka Version: 1.0.8 Bug: Denial Of Service Date: 09-Apr-2004 Author: Donato Ferrante e-mail: [email protected] web: www.autistici.org/fdonato xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx...

Gamespy 3d buffer overflow

Buffer overflow on IRC server reply parsing...

ChatZilla 0.8.23 - Remote Denial of Service

ChatZilla 0.8.23 - Remote Denial of Service // source: https://www.securityfocus.com/bid/8627/info It has been reported that ChatZilla is prone to a denial of service vulnerability. The problem arises as a remote attacker posing as an IRC server sends specially crafted requests to the client...

CVE-2003-0322: Undefined Security Weakness

Integer overflow in BitchX IRC client 1.0-0c19 and earlier allows remote malicious IRC servers to cause a denial of service crash...

CVE-2003-0321: Undefined Security Weakness

Multiple buffer overflows in BitchX IRC client 1.0-0c19 and earlier allow remote malicious IRC servers to cause a denial of service crash and possibly execute arbitrary code via long hostnames, nicknames, or channel names, which are not properly handled by the functions 1 sendctcp, 2...