CVE-2006-3293

parsenotice TiCPU in EnergyMech emech before 3.0.2 allows remote attackers to cause a denial of service crash via empty IRC CTCP NOTICE messages...

BitchX / epic IRC client integer overflow

Integer overflow on parsing server banner...

[ GLSA 200606-26 ] EnergyMech: Denial of Service

Gentoo Linux Security Advisory GLSA 200606-26 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...

EnergyMech IRC bot DoS

Crash on empty CTCP NOTICE message...

EnergyMech: Denial of service

Background EnergyMech is an IRC bot programmed in C. Description A bug in EnergyMech fails to handle empty CTCP NOTICEs correctly, and will cause a crash from a segmentation fault. Impact By sending an empty CTCP NOTICE, a remote attacker could exploit this vulnerability to cause a Denial of...

ozjournals.txt

OZJournals 1.2 alert"lol";&vemail=mail%40mail.it&vlocation=test&vcomment=test ---------------------------------------------------------------------------------------------- Credit Author: Kiki Site: http://kiki91.altervista.org IRC Channel: irc.azzurra.org 6667 system...

[SECURITY] [DSA 1052-1] New cgiirc packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 1052-1 [email protected] http://www.debian.org/security/ Martin Schulze May 8th, 2006 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1052-1] New cgiirc packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 1052-1 [email protected] http://www.debian.org/security/ Martin Schulze May 8th, 2006 http://www.debian.org/security/faq -...

DSA-1052-1 cgiirc - buffer overflows

Bulletin has no description...

Critical: Red Hat Security Advisory: mozilla security update

Updated mozilla packages that fix several security bugs are now available. This update has been rated as having critical security impact by the Red Hat Security Response Team. Updated 24 Apr 2006 The erratum text has been updated to include the details of additional issues that were fixed by thes...

QuickBlogger v1.4 Cross-Site Scripting

Website : www.jlwebworks.net closed Attacking method XSS http://www.site.compath/acc.phprequest=scriptalertdocument.cookie/script Patriotic Hackers irc.gigachat.net kurdhack Viva Kurdistan!...

Code injection

Linksys WRT54G routers version 5 running VXWorks allow remote attackers to cause a denial of service by sending a malformed DCC SEND string to an IRC channel, which causes an IRC connection reset, possibly related to the masquerading code for NAT environments, and as demonstrated via 1 a DCC SEND...

Code injection

Netgear 614 and 624 routers, possibly running VXWorks, allow remote attackers to cause a denial of service by sending a malformed DCC SEND string to an IRC channel, which causes an IRC connection reset, possibly related to the masquerading code for NAT environments, and as demonstrated via 1 a DC...

CVE-2006-1068

Netgear 614 and 624 routers, possibly running VXWorks, allow remote attackers to cause a denial of service by sending a malformed DCC SEND string to an IRC channel, which causes an IRC connection reset, possibly related to the masquerading code for NAT environments, and as demonstrated via 1 a DC...

CVE-2006-1067

Linksys WRT54G routers version 5 running VXWorks allow remote attackers to cause a denial of service by sending a malformed DCC SEND string to an IRC channel, which causes an IRC connection reset, possibly related to the masquerading code for NAT environments, and as demonstrated via 1 a DCC SEND...

CVE-2006-1068

Netgear 614 and 624 routers, possibly running VXWorks, allow remote attackers to cause a denial of service by sending a malformed DCC SEND string to an IRC channel, which causes an IRC connection reset, possibly related to the masquerading code for NAT environments, and as demonstrated via 1 a DC...

CVE-2006-1067

CVE-2006-1067 affects Linksys WRT54G routers versions 5 running VXWorks. The vulnerability allows remote attackers to trigger a denial-of-service by sending a malformed DCC SEND string to an IRC channel, causing an IRC connection reset. The issue may be related to masquerading code for NAT enviro...

CVE-2006-1068

Affected products: Netgear 614 and 624 routers (likely VXWorks). Vulnerability: remote attacker can cause a denial of service by sending a malformed DCC SEND string to an IRC channel, leading to an IRC connection reset. Possible cause: linked to masquerading code for NAT environments; details men...

CVE-2006-1067

Linksys WRT54G routers version 5 running VXWorks allow remote attackers to cause a denial of service by sending a malformed DCC SEND string to an IRC channel, which causes an IRC connection reset, possibly related to the masquerading code for NAT environments, and as demonstrated via 1 a DCC SEND...

Various router DoS

It appears that various routers are prone to an IRC-only DoS attack. Particularly Netgear and Linksys routers have been shown vulnerable. If a client behind one of the vulnerable routers connects to an IRC server on port 6667 and only 6667, does not DoS with other ports and a user posts the...