52 matches found
GLSA-201209-09 : Atheme IRC Services: Denial of Service
The remote host is affected by the vulnerability described in GLSA-201209-09 Atheme IRC Services: Denial of Service The myuserdelete function in account.c does not properly remove CertFP entries when deleting user accounts. Impact : A remote authenticated attacker may be able to cause a Denial of...
Atheme IRC Services: Denial of service
Background Atheme is a portable and secure set of open-source and modular IRC services. CertFP is certificate fingerprinting used to authenticate users to nicknames. Description The “myuserdelete” function in account.c does not properly remove CertFP entries when deleting user accounts. Impact A...
Debian DSA-1982-1 : hybserv - denial of service
Julien Cristau discovered that hybserv, a daemon running IRC services for IRCD-Hybrid, is prone to a denial of service attack via the commands option. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security...
Anope IRC Services With bs_fantasy_ext <= 1.1.16 mIRC script
No description provided by source. ; bsfantasyext = 1.1.16 Exploit by Phil ; Kudos to MattT for pointing this out ; Only seems to work for non-vhosted unresolved IPs ; Code is a little inefficient, sorry. ; Usage: /getip channel nickname bs bot nickname alias getip if $1 != $null && $2 != $null &...
Anope IRC Services With bs_fantasy_ext <= 1.2.0-RC1 mIRC script
Exploit for unknown platform in category remote exploits =============================================================== Anope IRC Services With bsfantasyext alias getip if $1 != $null && $2 != $null && $3 != $null set %exploit.channel $1 set %exploit.nickname $2 set %exploit.botnick $3 set...
Anope IRC Services With bs_fantasy_ext <= 1.2.0-RC1 mIRC script
No description provided by source. ; bsfantasyext = 1.1.16 Exploit by Phil ; Kudos to MattT for pointing this out ; Only seems to work for non-vhosted unresolved IPs ; Code is a little inefficient, sorry. ; Usage: /getip channel nickname bs bot nickname alias getip if $1 != $null && $2 != $null &...
Anope IRC Services With bs_fantasy_ext 1.2.0-RC1 - mIRC script
; bsfantasyext alias getip if $1 != $null && $2 != $null && $3 != $null set %exploit.channel $1 set %exploit.nickname $2 set %exploit.botnick $3 set %exploit.prefix !@ set %exploit.counter 1 while %exploit.counter = 9 mode %exploit.channel +b %exploit.prefix $+ %exploit.counter $+ inc...
Anope IRC Services With bs_fantasy_ext 1.2.0-RC1 - mIRC script
Anope IRC Services With bsfantasyext 1.2.0-RC1 - mIRC script ; bsfantasyext alias getip if $1 != $null && $2 != $null && $3 != $null set %exploit.channel $1 set %exploit.nickname $2 set %exploit.botnick $3 set %exploit.prefix !@ set %exploit.counter 1 while %exploit.counter = 9 mode...
FreeBSD : IRC Services-- Denial of Service Vulnerability (e5a9de5f-c6bc-11dc-b9f1-00a0cce0781e)
Secunia reports : A vulnerability has been reported in IRC Services, which can be exploited by malicious people to cause a Denial of Service. The vulnerability is caused due to the improper handling of overly long passwords within the 'defaultencrypt' function in encrypt.c and can be exploited to...
GLSA-200712-12 : IRC Services: Denial of Service
The remote host is affected by the vulnerability described in GLSA-200712-12 IRC Services: Denial of Service loverboy reported that the 'defaultencrypt' function in file encrypt.c does not properly handle overly long passwords. Impact : A remote attacker could provide an overly long password to t...
IRC Services DoS
DoS on oversized password...
[ GLSA 200712-12 ] IRC Services: Denial of Service
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 200712-12 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - -...
IRC Services: Denial of service
Background IRC Services is a system of services to be used with Internet Relay Chat networks. Description loverboy reported that the "defaultencrypt" function in file encrypt.c does not properly handle overly long passwords. Impact A remote attacker could provide an overly long password to the...
CVE-2007-6123
Unspecified vulnerability in IRC Services 5.1.8 has unknown impact and attack vectors...
CVE-2007-6122
The defaultencrypt function in encrypt.c in IRC Services before 5.0.63, and 5.1.x before 5.1.7, allows remote attackers to cause a denial of service daemon crash via a long password. NOTE: some of these details are obtained from third party information...
Code injection
Unspecified vulnerability in IRC Services 5.1.8 has unknown impact and attack vectors...
Information disclosure
The defaultencrypt function in encrypt.c in IRC Services before 5.0.63, and 5.1.x before 5.1.7, allows remote attackers to cause a denial of service daemon crash via a long password. NOTE: some of these details are obtained from third party information...
CVE-2007-6123
CVE-2007-6123 is linked to IRC Services 5.1.8. Connected data cites “Code injection” as the vulnerability type, but the public records here do not provide explicit root-cause details, vectors, affected components beyond the product/version, or concrete impact. No remediation or exploitation statu...
CVE-2007-6123
Unspecified vulnerability in IRC Services 5.1.8 has unknown impact and attack vectors...
CVE-2007-6122
CVE-2007-6122 affects IRC Services. The default_encrypt() function in encrypt.c fails to handle overly long passwords, enabling a remote attacker to crash the daemon (DoS). Affected versions are IRC Services prior to 5.0.63 and 5.1.x prior to 5.1.7. Multiple sources (Gentoo GLSA 200712-12; OpenVA...