CVE-2007-2951: Undefined Security Weakness

The parseIrcUrl function in src/kvirc/kernel/kviircurl.cpp in KVIrc 3.2.0 allows user-assisted remote attackers to execute arbitrary commands via shell metacharacters in an 1 irc:// or 2 irc6:// URI...

CVE-2007-3360

hook.c in BitchX 1.1-final allows remote IRC servers to execute arbitrary commands by sending a client certain data containing NICK and EXEC strings, which exceeds the bounds of a hash table, and injects an EXEC hook function that receives and executes shell commands...

CVE-2007-3360

hook.c in BitchX 1.1-final allows remote IRC servers to execute arbitrary commands by sending a client certain data containing NICK and EXEC strings, which exceeds the bounds of a hash table, and injects an EXEC hook function that receives and executes shell commands...

Out-of-bounds

hook.c in BitchX 1.1-final allows remote IRC servers to execute arbitrary commands by sending a client certain data containing NICK and EXEC strings, which exceeds the bounds of a hash table, and injects an EXEC hook function that receives and executes shell commands...

CVE-2007-3360

CVE-2007-3360 affects BitchX 1.1-final, where a bug in hook.c allows a remote IRC server to execute arbitrary shell commands. By sending crafted data containing NICK and EXEC strings, the input overflows a hash table and injects an EXEC hook that runs commands on the client. This is a network‑acc...

CVE-2007-3360

hook.c in BitchX 1.1-final allows remote IRC servers to execute arbitrary commands by sending a client certain data containing NICK and EXEC strings, which exceeds the bounds of a hash table, and injects an EXEC hook function that receives and executes shell commands...

CVE-2007-3360: Undefined Security Weakness

hook.c in BitchX 1.1-final allows remote IRC servers to execute arbitrary commands by sending a client certain data containing NICK and EXEC strings, which exceeds the bounds of a hash table, and injects an EXEC hook function that receives and executes shell commands...

Default credentials

The dosetpassword function in modules/chanserv/set.c in IRC Services before 5.0.60 preserves channel founder privileges across a channel password change ChanServ SET PASSWORD, which allows remote authenticated users to obtain the new password through automated e-mail, or perform privileged action...

Design/Logic Flaw

IRC Services before 5.0.62, and 5.1 before 5.1pre3, allows remote attackers to disconnect users with guest nicknames by linking a guest nickname to a nickname that is already registered...

CVE-2007-3246

The dosetpassword function in modules/chanserv/set.c in IRC Services before 5.0.60 preserves channel founder privileges across a channel password change ChanServ SET PASSWORD, which allows remote authenticated users to obtain the new password through automated e-mail, or perform privileged action...

CVE-2007-3245

CVE-2007-3245 affects IRC Services prior to 5.0.62, and 5.1 prior to 5.1pre3. It allows remote attackers to disconnect users who have guest nicknames by linking a guest nickname to another nickname that is already registered. The provided documents identify the affected versions and describe the ...

CVE-2007-3246

The CVE affects IRC Services (before version 5.0.60) via do_set_password in modules/chanserv/set.c. The root cause is that ChanServ SET PASSWORD preserves channel founder privileges across a password change, enabling remote authenticated users to obtain the new password through automated e‑mail o...

CVE-2007-3246

The dosetpassword function in modules/chanserv/set.c in IRC Services before 5.0.60 preserves channel founder privileges across a channel password change ChanServ SET PASSWORD, which allows remote authenticated users to obtain the new password through automated e-mail, or perform privileged action...

CVE-2007-3245

IRC Services before 5.0.62, and 5.1 before 5.1pre3, allows remote attackers to disconnect users with guest nicknames by linking a guest nickname to a nickname that is already registered...

CVE-2007-3245: Undefined Security Weakness

IRC Services before 5.0.62, and 5.1 before 5.1pre3, allows remote attackers to disconnect users with guest nicknames by linking a guest nickname to a nickname that is already registered...

CVE-2007-3246: Undefined Security Weakness

The dosetpassword function in modules/chanserv/set.c in IRC Services before 5.0.60 preserves channel founder privileges across a channel password change ChanServ SET PASSWORD, which allows remote authenticated users to obtain the new password through automated e-mail, or perform privileged action...

Fundanemt 2.2.0 - spellcheck.php Remote Code Execution

Fundanemt 2.2.0 - spellcheck.php Remote Code Execution 126 $result.=" ."; else $result.=" ".$string$i; if strlendechexord$string$i==2 $exa.=" ".dechexord$string$i; else $exa.=" 0".dechexord$string$i...

Stack overflow

Stack-based buffer overflow in mod/server.mod/servrmsg.c in Eggdrop 1.6.18, and possibly earlier, allows user-assisted, remote IRC servers to execute arbitrary code via a long private message...

CVE-2007-2807

Stack-based buffer overflow in mod/server.mod/servrmsg.c in Eggdrop 1.6.18, and possibly earlier, allows user-assisted, remote IRC servers to execute arbitrary code via a long private message...

CVE-2007-2807

Stack-based buffer overflow in mod/server.mod/servrmsg.c in Eggdrop 1.6.18, and possibly earlier, allows user-assisted, remote IRC servers to execute arbitrary code via a long private message...