Debian DSA-1982-1 : hybserv - denial of service

Julien Cristau discovered that hybserv, a daemon running IRC services for IRCD-Hybrid, is prone to a denial of service attack via the commands option. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security...

[SECURITY] Fedora 12 Update: konversation-1.2.3-1.fc12

A simple and easy to use IRC client with support for strikeout; multi-channel joins; away / unaway messages; ignore list functionality; support for foreign language characters; auto-connect to server; optional timestamps to chat windows; configurable background colors and much more...

[SECURITY] Fedora 11 Update: konversation-1.2.3-1.fc11

A simple and easy to use IRC client with support for strikeout; multi-channel joins; away / unaway messages; ignore list functionality; support for foreign language characters; auto-connect to server; optional timestamps to chat windows; configurable background colors and much more...

[SECURITY] Fedora 12 Update: seamonkey-2.0.3-1.fc12

SeaMonkey is an all-in-one Internet application suite. It includes a browser, mail/news client, IRC client, JavaScript debugger, and a tool to inspect the DOM for web pages. It is derived from the application formerly known as Mozilla Application Suite...

CentOS Update for seamonkey CESA-2010:0113 centos3 i386

Check for the Version of seamonkey OpenVAS Vulnerability Test CentOS Update for seamonkey CESA-2010:0113 centos3 i386 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify ...

RHEL 3 / 4 : seamonkey (RHSA-2010:0113)

Updated SeaMonkey packages that fix several security issues are now available for Red Hat Enterprise Linux 3 and 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. SeaMonkey is an open source Web browser, email and newsgroup client, IRC chat...

Hybserv2 :help命令远程拒绝服务漏洞

BUGTRAQ ID: 38006 CVE ID: CVE-2010-0303 Hybserv2是改进版的Hybserv IRC服务器，可提供即时会话服务。 Hybserv2的mystring.c文件中存在拒绝服务漏洞，远程用户可以通过向MemoServ服务发送包含有help \t选项的私人消息导致守护程序崩溃。 Hybserv2 Hybserv2 1.9.4 Hybserv2 Hybserv2 1.9.3 Hybserv2 Hybserv2 1.9.2 厂商补丁： Debian ------ Debian已经为此发布了一个安全公告（DSA-1982-1）以及相应补丁:...

CVE-2009-4016

Integer underflow in the cleanstring function in ircstring.c in 1 IRCD-hybrid 7.2.2 and 7.2.3, 2 ircd-ratbox before 2.2.9, and 3 oftc-hybrid before 1.6.8, when flattenlinks is disabled, allows remote attackers to execute arbitrary code or cause a denial of service daemon crash via a LINKS command...

DEBIAN-CVE-2009-4016

Integer underflow in the cleanstring function in ircstring.c in 1 IRCD-hybrid 7.2.2 and 7.2.3, 2 ircd-ratbox before 2.2.9, and 3 oftc-hybrid before 1.6.8, when flattenlinks is disabled, allows remote attackers to execute arbitrary code or cause a denial of service daemon crash via a LINKS command...

CVE-2009-4016

Integer underflow in the cleanstring function in ircstring.c in 1 IRCD-hybrid 7.2.2 and 7.2.3, 2 ircd-ratbox before 2.2.9, and 3 oftc-hybrid before 1.6.8, when flattenlinks is disabled, allows remote attackers to execute arbitrary code or cause a denial of service daemon crash via a LINKS command...

UBUNTU-CVE-2009-4016

Integer underflow in the cleanstring function in ircstring.c in 1 IRCD-hybrid 7.2.2 and 7.2.3, 2 ircd-ratbox before 2.2.9, and 3 oftc-hybrid before 1.6.8, when flattenlinks is disabled, allows remote attackers to execute arbitrary code or cause a denial of service daemon crash via a LINKS command...

CVE-2009-4016

Integer underflow in the cleanstring function in ircstring.c in 1 IRCD-hybrid 7.2.2 and 7.2.3, 2 ircd-ratbox before 2.2.9, and 3 oftc-hybrid before 1.6.8, when flattenlinks is disabled, allows remote attackers to execute arbitrary code or cause a denial of service daemon crash via a LINKS command...

CVE-2009-4016

Integer underflow in the cleanstring function in ircstring.c in 1 IRCD-hybrid 7.2.2 and 7.2.3, 2 ircd-ratbox before 2.2.9, and 3 oftc-hybrid before 1.6.8, when flattenlinks is disabled, allows remote attackers to execute arbitrary code or cause a denial of service daemon crash via a LINKS command...

Firefox Hole Exploited On IRC

Underscoring a little-known web vulnerability, hackers are exploiting a weakness in the Mozilla Firefox browser to wreak havoc on Freenode and other networks that cater to users of internet relay chat. Read the full article. The Register...

PHP Product Catalog - Cross-Site Request Forgery (Change Administrator Password)

PHP Product Catalog - Cross-Site Request Forgery Change Administrator Password /\ == \ /\ \ /\ \ \ \ Admin : Passwd Email : |-------------------------------------------------------------------------------| // End of attack -----------------------------------------------------------------...

FreeBSD : irc-ratbox -- multiple vulnerabilities (192609c8-0c51-11df-82a0-00248c9b4be7)

SecurityFocus reports : The first affects the /quote HELP module and allows a user to trigger an IRCD crash on some platforms. The second affects the /links processing module when the flattenlinks configuration option is not enabled. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

hybrid and ratbox IRC servers multiple security vulnerabilities

LINKS command, integer overflow, HELP command DoS...

[SECURITY] [DSA 1980-1] New ircd-hybrid/ircd-ratbox packages fix arbitrary code execution

------------------------------------------------------------------------ Debian Security Advisory DSA-1980-1 [email protected] http://www.debian.org/security/ Steffen Joeris January 27, 2010 http://www.debian.org/security/faq -...

irc-ratbox -- multiple vulnerabilities

SecurityFocus reports: The first affects the /quote HELP module and allows a user to trigger an IRCD crash on some platforms. The second affects the /links processing module when the flattenlinks configuration option is not enabled...

Ubuntu: Security Advisory (USN-886-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...