CVE-2003-0321: Undefined Security Weakness

Multiple buffer overflows in BitchX IRC client 1.0-0c19 and earlier allow remote malicious IRC servers to cause a denial of service crash and possibly execute arbitrary code via long hostnames, nicknames, or channel names, which are not properly handled by the functions 1 sendctcp, 2...

CVE-2003-0328: Undefined Security Weakness

EPIC IRC Client EPIC4 pre2.002, pre2.003, and possibly later versions, allows remote malicious IRC servers to cause a denial of service crash and possibly execute arbitrary code via a CTCP request from a large nickname, which causes an incorrect length calculation...

CVE-2003-0322: Undefined Security Weakness

Integer overflow in BitchX IRC client 1.0-0c19 and earlier allows remote malicious IRC servers to cause a denial of service crash...

CVE-2003-0324: Undefined Security Weakness

Buffer overflows in EPIC IRC Client EPIC4 1.0.1 allows remote malicious IRC servers to cause a denial of service crash and possibly execute arbitrary code via long replies that are not properly handled by the 1 userhostcmdreturned function, or 2 Statusbar capability...

BitchX security fixes

New BitchX packages are available to fix security problems found by Timo Sirainen. BitchX is an IRC Internet Relay Chat client. Under certain circumstances, a malicious IRC server could cause BitchX to crash, or possibly to run arbitrary code as the user running BitchX. All sites running BitchX a...

CVE-2003-0334

BitchX IRC client 1.0c20cvs and earlier allows attackers to cause a denial of service core dump via certain channel mode changes that are not properly handled in names.c...

[SECURITY] [DSA 298-1] New EPIC4 packages fix DoS and arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 298-1 [email protected] http://www.debian.org/security/ Martin Schulze May 2nd, 2003 http://www.debian.org/security/faq -...

CVE-2002-0382

Summary: CVE-2002-0382 affects the XChat IRC client. The issue arises when handling a /dns query, where the DNS reverse lookup can contain shell metacharacters, allowing arbitrary commands to be executed with the user’s privileges. This is caused by XChat passing the resolver/hostname to a shell ...

CVE-2002-0382: Undefined Security Weakness

XChat IRC client allows remote attackers to execute arbitrary commands via a /dns command on a host whose DNS reverse lookup contains shell metacharacters...

[argv] BitchX-353 Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Mon Feb 17 15:26:06 EST 2003 1. Topic: BitchX IRC Client 2. Relevant versions: Vulnerable: BitchX-75p3 BitchX-1.0c16 BitchX-1.0c19 BitchX-1.0c20cvs Not Vulnerable: BitchX-1.0c18 3. Problem description: A denial of service vulnerability exists in BitchX. Sending ...

CVE-2002-2271

Buffer overflow in BigFun 1.51b IRC client, when the Direct Client Connection DCC option is used, allows remote attackers to cause a denial of service crash via a long string...

CVE-2002-0928

Buffer overflow in the Pirch 98 IRC client allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long hyperlink in a channel or private message...

CVE-2002-0983

IRC client irssi in irssi-text before 0.8.4 allows remote attackers to cause a denial of service crash via an IRC channel that has a long topic followed by a certain string, possibly triggering a buffer overflow...

CVE-2002-0928

The CVE-2002-0928 entry concerns Pirch 98 IRC client. A buffer overflow in the handling of a long hyperlink in a channel or private message can lead to denial of service and may allow arbitrary code execution. The affected product is the Pirch 98 IRC client; the exact vulnerable component is desc...

CVE-2002-0928: Undefined Security Weakness

Buffer overflow in the Pirch 98 IRC client allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long hyperlink in a channel or private message...

CVE-2002-0983

CVE-2002-0983 affects the IRC client component irssi-text in irssi, prior to version 0.8.4. The vulnerability allows a remote attacker to cause a denial of service (crash) by joining a channel whose topic is excessively long and followed by a specific string, potentially triggering a buffer overf...

CVE-2002-0983

IRC client irssi in irssi-text before 0.8.4 allows remote attackers to cause a denial of service crash via an IRC channel that has a long topic followed by a certain string, possibly triggering a buffer overflow...

DSA-156 epic4-script-light - arbitrary script execution

Bulletin has no description...

Important: Red Hat Security Advisory: xchat security update

A security issue in XChat allows a malicious server to execute arbitrary commands. XChat is a popular cross-platform IRC client. Versions of XChat prior to 1.8.9 do not filter the response from an IRC server when a /dns query is executed. Because XChat resolves hostnames by passing the configured...

Two more exploitable holes in the trillian irc module

Sent the following advisory to trillian: Tue, 16 Jul 2002 16:49:19 -0400 EDT Submitted by : Josh [email protected], omega [email protected] on July 16th, 2002 Vulnerability : Format strings bug and buffer overflow in the IRC client of Trillian Tested On : Trillian v0.73,0.72 Remote : Yes Gree...