2518 matches found
Information disclosure
The defaultencrypt function in encrypt.c in IRC Services before 5.0.63, and 5.1.x before 5.1.7, allows remote attackers to cause a denial of service daemon crash via a long password. NOTE: some of these details are obtained from third party information...
CVE-2007-6123
CVE-2007-6123 is linked to IRC Services 5.1.8. Connected data cites “Code injection” as the vulnerability type, but the public records here do not provide explicit root-cause details, vectors, affected components beyond the product/version, or concrete impact. No remediation or exploitation statu...
CVE-2007-6122
CVE-2007-6122 affects IRC Services. The default_encrypt() function in encrypt.c fails to handle overly long passwords, enabling a remote attacker to crash the daemon (DoS). Affected versions are IRC Services prior to 5.0.63 and 5.1.x prior to 5.1.7. Multiple sources (Gentoo GLSA 200712-12; OpenVA...
CVE-2007-6122
The defaultencrypt function in encrypt.c in IRC Services before 5.0.63, and 5.1.x before 5.1.7, allows remote attackers to cause a denial of service daemon crash via a long password. NOTE: some of these details are obtained from third party information...
CVE-2007-6123
Unspecified vulnerability in IRC Services 5.1.8 has unknown impact and attack vectors...
IRC Services-- Denial of Service Vulnerability
Secunia reports: A vulnerability has been reported in IRC Services, which can be exploited by malicious people to cause a Denial of Service. The vulnerability is caused due to the improper handling of overly long passwords within the "defaultencrypt" function in encrypt.c and can be exploited to...
DEBIAN-CVE-2007-6062
irc-channel.c in ngIRCd before 0.10.3 allows remote attackers to cause a denial of service crash via a JOIN command without a channel argument...
CVE-2007-6062
CVE-2007-6062 affects ngIRCd prior to 0.10.3. The vulnerability is in irc-channel.c where a JOIN command without a channel argument can cause a remote crash, leading to a denial of service. Affected component: ngIRCd (irc-channel.c). Root cause: JOIN with missing channel argument described as cra...
[SECURITY] Fedora 8 Update: seamonkey-1.1.5-2.fc8
SeaMonkey is an all-in-one Internet application suite. It includes a browser, mail/news client, IRC client, JavaScript debugger, and a tool to inspect the DOM for web pages. It is derived from the application formerly known as Mozilla Application Suite...
Fedora 7 : seamonkey-1.1.3-1.fc7 (2007-1181)
SeaMonkey is an open source Web browser, advanced email and newsgroup client, IRC chat client, and HTML editor. Several flaws were found in the way SeaMonkey processed certain malformed JavaScript code. A web page containing malicious JavaScript code could cause SeaMonkey to crash or potentially...
Fedora 7 : seamonkey-1.1.5-1.fc7 (2007-2601)
SeaMonkey is an open source Web browser, advanced email and newsgroup client, IRC chat client, and HTML editor. By leveraging browser flaws, users could be fooled into possibly surrendering sensitive information CVE-2007-1095, CVE-2007-3511, CVE-2007-3844, CVE-2007-5334. Malformed web content cou...
DNS Recursion Bandwidth Amplification - Denial of Service (PoC)
!/usr/bin/perl Get Net::RawIP at http://search.cpan.org/CPAN/authors/id/S/SZ/SZABGAB/Net-RawIP-0.2101.tar.gz cpan Net::DNS:Resolver seems to work fine on each machine I throw it on, as well. PS: To see if you can spoof, check out the ANA Spoofer project. http://spoofer.csail.mit.edu/ Written by...
DNS Recursion Bandwidth Amplification - Denial of Service (PoC)
DNS Recursion Bandwidth Amplification - Denial of Service PoC !/usr/bin/perl Get Net::RawIP at http://search.cpan.org/CPAN/authors/id/S/SZ/SZABGAB/Net-RawIP-0.2101.tar.gz cpan Net::DNS:Resolver seems to work fine on each machine I throw it on, as well. PS: To see if you can spoof, check out the A...
Buffer overflow
Multiple buffer overflows in Miranda before 0.7.1 allow remote attackers to execute arbitrary code via unspecified vectors involving 1 IRC options, 2 Jabber forms, and unspecified aspects of the 3 ICQ and 4 Yahoo! instant messaging functionality. NOTE: some of these details are obtained from thir...
CVE-2007-5590
Multiple buffer overflows in Miranda before 0.7.1 allow remote attackers to execute arbitrary code via unspecified vectors involving 1 IRC options, 2 Jabber forms, and unspecified aspects of the 3 ICQ and 4 Yahoo! instant messaging functionality. NOTE: some of these details are obtained from thir...
CVE-2007-5590
Miranda IM is affected by stack-based buffer overflow vulnerabilities described across multiple CVEs in 2007. Specifically, Red Hat and NVD entries indicate that Miranda IM 0.6.8 and 0.7.0 are exploitable via crafted Yahoo! Messenger packets to gain arbitrary code execution, with potential overla...
CVE-2007-5590
Multiple buffer overflows in Miranda before 0.7.1 allow remote attackers to execute arbitrary code via unspecified vectors involving 1 IRC options, 2 Jabber forms, and unspecified aspects of the 3 ICQ and 4 Yahoo! instant messaging functionality. NOTE: some of these details are obtained from thir...
CVE-2003-1377
Buffer overflow in the reverse DNS lookup of Smart IRC Daemon SIRCD 0.4.0 and 0.4.4 allows remote attackers to execute arbitrary code via a client with a long hostname...
CVE-2002-2271
The CVE concerns BigFun 1.51b IRC client with Direct Client Connection (DCC) enabled. A buffer overflow is triggered by a long string, allowing a remote attacker to cause a denial of service (crash). No additional technical details (versions beyond 1.51b, specific vulnerable file/byte offset, or ...