569 matches found
CVE-2003-0324
Buffer overflows in EPIC IRC Client EPIC4 1.0.1 allows remote malicious IRC servers to cause a denial of service crash and possibly execute arbitrary code via long replies that are not properly handled by the 1 userhostcmdreturned function, or 2 Statusbar capability...
CVE-2003-0334
BitchX IRC client 1.0c20cvs and earlier allows attackers to cause a denial of service core dump via certain channel mode changes that are not properly handled in names.c...
CVE-2003-0334
The CVE-2003-0334 issue affects BitchX IRC client versions 1.0c20cvs and earlier. A DoS (core dump) can be triggered by certain channel mode changes that are not properly handled in names.c. The Mandrake advisory notes the vulnerability was fixed in CVS and patched in released updates. Practicall...
CVE-2003-0324
Buffer overflows in EPIC IRC Client EPIC4 1.0.1 allows remote malicious IRC servers to cause a denial of service crash and possibly execute arbitrary code via long replies that are not properly handled by the 1 userhostcmdreturned function, or 2 Statusbar capability...
CVE-2003-0321
CVE-2003-0321 affects BitchX IRC client up to version 1.0-0c19 and earlier. The vulnerability stems from multiple buffer overflows in core parsing/handling paths (send_ctcp, cannot_join_channel, cluster, BX_compress_modes, handle_oper_vision, ban_it) when processing long hostnames, nicknames, or ...
CVE-2003-0322
Integer overflow in BitchX IRC client 1.0-0c19 and earlier allows remote malicious IRC servers to cause a denial of service crash...
CVE-2003-0324
EPIC IRC Client (EPIC4) 1.0.1 is affected by a buffer overflow vulnerability described in CVE-2003-0324. The issue allows a remote malicious IRC server to cause a denial of service (crash) and potentially execute arbitrary code by sending long replies that are not properly handled by the userhost...
CVE-2003-0321
Multiple buffer overflows in BitchX IRC client 1.0-0c19 and earlier allow remote malicious IRC servers to cause a denial of service crash and possibly execute arbitrary code via long hostnames, nicknames, or channel names, which are not properly handled by the functions 1 sendctcp, 2...
CVE-2003-0328
EPIC IRC Client EPIC4 pre2.002, pre2.003, and possibly later versions, allows remote malicious IRC servers to cause a denial of service crash and possibly execute arbitrary code via a CTCP request from a large nickname, which causes an incorrect length calculation...
CVE-2003-0322
CVE-2003-0322 describes an integer overflow in BitchX IRC client 1.0-0c19 and earlier that allows a remote, malicious IRC server to crash the client (DoS). Affected software: BitchX (IRC client) prior to 1.0-0c19. Root cause: integer overflow when processing certain server replies, leading to a d...
CVE-2003-0324
Buffer overflows in EPIC IRC Client EPIC4 1.0.1 allows remote malicious IRC servers to cause a denial of service crash and possibly execute arbitrary code via long replies that are not properly handled by the 1 userhostcmdreturned function, or 2 Statusbar capability...
CVE-2003-0328
CVE-2003-0328 describes a remote denial-of-service and potential arbitrary-code execution in EPIC IRC Client (EPIC4) when connecting to a malicious IRC server. The issue stems from a CTCP response with a large nickname that leads to an incorrect length calculation, enabling a buffer overrun. Publ...
CVE-2003-0328
EPIC IRC Client EPIC4 pre2.002, pre2.003, and possibly later versions, allows remote malicious IRC servers to cause a denial of service crash and possibly execute arbitrary code via a CTCP request from a large nickname, which causes an incorrect length calculation...
BitchX security fixes
New BitchX packages are available to fix security problems found by Timo Sirainen. BitchX is an IRC Internet Relay Chat client. Under certain circumstances, a malicious IRC server could cause BitchX to crash, or possibly to run arbitrary code as the user running BitchX. All sites running BitchX a...
CVE-2003-0334
BitchX IRC client 1.0c20cvs and earlier allows attackers to cause a denial of service core dump via certain channel mode changes that are not properly handled in names.c...
[SECURITY] [DSA 298-1] New EPIC4 packages fix DoS and arbitrary code execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 298-1 [email protected] http://www.debian.org/security/ Martin Schulze May 2nd, 2003 http://www.debian.org/security/faq -...
CVE-2002-0382
Summary: CVE-2002-0382 affects the XChat IRC client. The issue arises when handling a /dns query, where the DNS reverse lookup can contain shell metacharacters, allowing arbitrary commands to be executed with the user’s privileges. This is caused by XChat passing the resolver/hostname to a shell ...
[argv] BitchX-353 Vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Mon Feb 17 15:26:06 EST 2003 1. Topic: BitchX IRC Client 2. Relevant versions: Vulnerable: BitchX-75p3 BitchX-1.0c16 BitchX-1.0c19 BitchX-1.0c20cvs Not Vulnerable: BitchX-1.0c18 3. Problem description: A denial of service vulnerability exists in BitchX. Sending ...