CVE-2007-1648

0irc 1345 build 20060823 allows remote attackers to cause a denial of service application crash by operating an IRC server that sends a long string to a client, which triggers a NULL pointer dereference...

CVE-2007-1648

CVE-2007-1648 affects 0irc 1345 build 20060823. A remote attacker can cause an application crash by having the IRC server send a long string to a client, triggering a NULL pointer dereference (DoS). Root cause: NULL pointer dereference when processing oversized server messages. Impact: denial of ...

USN-409-1: ksirc vulnerability

Federico L. Bossi Bonin discovered a Denial of Service vulnerability in ksirc. By sending a special response packet, a malicious IRC server could crash ksirc...

[KDE Security Advisory] ksirc Denial of Service vulnerability

KDE Security Advisory: ksirc denial of service vulnerability Original Release Date: 2007-01-09 URL: http://www.kde.org/info/security/advisory-20070109-1.txt 0. References CVE-2006-6811 http://www.milw0rm.com/exploits/3023 http://www.securityfocus.com/bid/21790 1. Systems affected: ksirc as shippe...

CVE-2006-6811

KsIRC 1.3.12 allows remote attackers to cause a denial of service crash via a long PRIVMSG string when connecting to an Internet Relay Chat IRC server, which causes an assertion failure and results in a NULL pointer dereference. NOTE: this issue was originally reported as a buffer overflow...

CVE-2006-6811

KsIRC 1.3.12 allows remote attackers to cause a denial of service crash via a long PRIVMSG string when connecting to an Internet Relay Chat IRC server, which causes an assertion failure and results in a NULL pointer dereference. NOTE: this issue was originally reported as a buffer overflow...

postnuke0750.txt

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 PostNuke SQL Injection 0.750=x cXIb8O3.5 Author: cXIb8O3 Date: 2.3.2005 from SecurityReason.Com - --- 0.Description --- PostNuke: The Phoenix Release 0.750 PostNuke is an open source, open developement content management system CMS. PostNuke started a...

IRC Server Detection

Binary data 3107.prm...

FreeBSD : bnc -- remotely exploitable buffer overflow in getnickuserhost (9be819c6-4633-11d9-a9e7-0001020eed82)

A LSS Security Advisory reports : There is a buffer overflow vulnerability in getnickuserhost function that is called when BNC is processing response from IRC server. Vulnerability can be exploited if attacker tricks user to connect to his fake IRC server that will exploit this vulnerability. If...

CVE-2005-0131

The Quick Connection dialog in Konversation 0.15 inadvertently uses the user-provided password as the nickname instead of the user-provided nickname when connecting to the IRC server, which could leak the password to other users...

CVE-2005-0131

The Quick Connection dialog in Konversation 0.15 inadvertently uses the user-provided password as the nickname instead of the user-provided nickname when connecting to the IRC server, which could leak the password to other users...

multiple remote denial of service vulnerabilities in Gaim

I. Synopsis Gaim http://gaim.sourceforge.net is a multi-protocol instant messaging client. I have identified several remote denial of service vulnerabilities affecting Gaim 1.2.0, and probably older versions as well. II. Problems 1. Buffer overread in gaimmarkupstriphtml A programming error in...

CVE-2004-1052

Buffer overflow in the getnickuserhost function in BNC 2.8.9, and possibly other versions, allows remote IRC servers to execute arbitrary code via an IRC server response that contains many 1 ! exclamation or 2 @ at sign characters...

CVE-2004-1716

CVE-2004-1716 is a cross-site scripting (XSS) vulnerability affecting PForum before 1.26 . The issue allows remote attackers to inject arbitrary web script or HTML through the IRC Server or AIM ID fields in the user profile. The connected documents confirm the affected component and vectors but d...

CVE-2005-0131

The CVE-2005-0131 entry concerns Konversation 0.15. The Quick Connection dialog erroneously uses the user’s password as the nickname when connecting to an IRC server, which can leak the password to other users. This is tied to the Konversation IRC client and stems from the login handling in the Q...

Debian DSA-595-1 : bnc - buffer overflow

Leon Juranic discovered that BNC, an IRC session bouncing proxy, does not always protect buffers from being overwritten. This could exploited by a malicious IRC server to overflow a buffer of limited size and execute arbitrary code on the client host. %NASLMINLEVEL 70300 C Tenable Network Securit...

BNC IRC Server Incorrect Password Authentication Bypass

The remote host is running a version of the BNC IRC proxy that contains a flaw in its authentication process that accepted only logins with incorrect passwords. An attacker may use this issue to gain access to the remote IRC proxy server. C Tenable Network Security, Inc. include"compat.inc";...

BNC < 2.9.1 getnickuserhost IRC Server Response Buffer Overflow

Binary data 2403.prm...

BNC IRC Server < 2.9.1 Authentication Bypass

Binary data 2404.prm...

bnc -- remotely exploitable buffer overflow in getnickuserhost

A LSS Security Advisory reports: There is a buffer overflow vulnerability in getnickuserhost function that is called when BNC is processing response from IRC server. Vulnerability can be exploited if attacker tricks user to connect to his fake IRC server that will exploit this vulnerability. If t...