CVE-2007-6122

CVE-2007-6122 affects IRC Services. The default_encrypt() function in encrypt.c fails to handle overly long passwords, enabling a remote attacker to crash the daemon (DoS). Affected versions are IRC Services prior to 5.0.63 and 5.1.x prior to 5.1.7. Multiple sources (Gentoo GLSA 200712-12; OpenVA...

IRC Services-- Denial of Service Vulnerability

Secunia reports: A vulnerability has been reported in IRC Services, which can be exploited by malicious people to cause a Denial of Service. The vulnerability is caused due to the improper handling of overly long passwords within the "defaultencrypt" function in encrypt.c and can be exploited to...

Default credentials

The dosetpassword function in modules/chanserv/set.c in IRC Services before 5.0.60 preserves channel founder privileges across a channel password change ChanServ SET PASSWORD, which allows remote authenticated users to obtain the new password through automated e-mail, or perform privileged action...

CVE-2007-3246

The dosetpassword function in modules/chanserv/set.c in IRC Services before 5.0.60 preserves channel founder privileges across a channel password change ChanServ SET PASSWORD, which allows remote authenticated users to obtain the new password through automated e-mail, or perform privileged action...

Design/Logic Flaw

IRC Services before 5.0.62, and 5.1 before 5.1pre3, allows remote attackers to disconnect users with guest nicknames by linking a guest nickname to a nickname that is already registered...

CVE-2007-3245

IRC Services before 5.0.62, and 5.1 before 5.1pre3, allows remote attackers to disconnect users with guest nicknames by linking a guest nickname to a nickname that is already registered...

CVE-2007-3245

CVE-2007-3245 affects IRC Services prior to 5.0.62, and 5.1 prior to 5.1pre3. It allows remote attackers to disconnect users who have guest nicknames by linking a guest nickname to another nickname that is already registered. The provided documents identify the affected versions and describe the ...

CVE-2007-3246

The CVE affects IRC Services (before version 5.0.60) via do_set_password in modules/chanserv/set.c. The root cause is that ChanServ SET PASSWORD preserves channel founder privileges across a password change, enabling remote authenticated users to obtain the new password through automated e‑mail o...

CVE-2007-3246

The dosetpassword function in modules/chanserv/set.c in IRC Services before 5.0.60 preserves channel founder privileges across a channel password change ChanServ SET PASSWORD, which allows remote authenticated users to obtain the new password through automated e-mail, or perform privileged action...

CVE-2005-0987

Unknown vulnerability in IRC Services NickServ LISTLINKS before 5.0.50 allows remote attackers to obtain the links of a nick...

CVE-2005-0987

CVE-2005-0987 is described as an Unknown vulnerability in IRC Services NickServ LISTLINKS prior to version 5.0.50, allowing remote attackers to obtain the links of a nick. The connected documents confirm the affected component as IRC Services NickServ LISTLINKS and specify the fixed version as 5....

irc.services.DoS.txt

Date: Thu, 22 Apr 1999 22:53:42 EDT From: Andy Church To: [email protected] Subject: Bug in Services for IRC Networks 4.2.2 A bug has been found in versions through 4.2.2 of Services for IRC Networks which allows any IRC user to crash the program. The channel service's SET SUCCESSOR command do...