CVE-2005-0130

Certain Perl scripts in Konversation 0.15 allow remote attackers to execute arbitrary commands via shell metacharacters in 1 channel names or 2 song names that are not properly quoted when the user runs IRC scripts...

CVE-2005-0131

The Quick Connection dialog in Konversation 0.15 inadvertently uses the user-provided password as the nickname instead of the user-provided nickname when connecting to the IRC server, which could leak the password to other users...

CVE-2005-0131

The Quick Connection dialog in Konversation 0.15 inadvertently uses the user-provided password as the nickname instead of the user-provided nickname when connecting to the IRC server, which could leak the password to other users...

Konversation IRC Client < 0.15.1 Multiple Remote Vulnerabilities

Binary data 2547.prm...

CVE-2004-2553

The Ignition Project ignitionServer 0.1.2 through 0.1.2-R2 allows remote authenticated users with local IRC operator privileges to obtain global IRC operator privileges by using the unofficial umode command with the +ORD argument...

CVE-2004-0605

Non-registered IRC users using 1 ircd-hybrid 7.0.1 and earlier, 2 ircd-ratbox 1.5.1 and earlier, or 3 ircd-ratbox 2.0rc6 and earlier do not have a rate-limit imposed, which could allow remote attackers to cause a denial of service by repeatedly making requests, which are slowly dequeued...

[SA13302] BNC IRC proxy Incorrect Password Authentication Bypass Vulnerability

TITLE: BNC IRC proxy Incorrect Password Authentication Bypass Vulnerability SECUNIA ADVISORY ID: SA13302 VERIFY ADVISORY: http://secunia.com/advisories/13302/ CRITICAL: Moderately critical IMPACT: Security Bypass WHERE: From remote SOFTWARE: BNC IRC proxy 2.x http://secunia.com/product/1622/...

DSA-595-1 bnc - buffer overflow

Bulletin has no description...

Debian DSA-595-1 : bnc - buffer overflow

Leon Juranic discovered that BNC, an IRC session bouncing proxy, does not always protect buffers from being overwritten. This could exploited by a malicious IRC server to overflow a buffer of limited size and execute arbitrary code on the client host. %NASLMINLEVEL 70300 C Tenable Network Securit...

CVE-2004-0274

Share.mod in Eggheads Eggdrop IRC bot 1.6.10 through 1.6.15 can mistakenly assign STATOFFERED status to a bot that is not a sharebot, which allows remote attackers to use STATOFFERED to promote a bot to a sharebot and conduct unauthorized activities...

CVE-2004-0274

Share.mod in Eggheads Eggdrop IRC bot 1.6.10 through 1.6.15 can mistakenly assign STATOFFERED status to a bot that is not a sharebot, which allows remote attackers to use STATOFFERED to promote a bot to a sharebot and conduct unauthorized activities...

CVE-2004-1052

Buffer overflow in the getnickuserhost function in BNC 2.8.9, and possibly other versions, allows remote IRC servers to execute arbitrary code via an IRC server response that contains many 1 ! exclamation or 2 @ at sign characters...

CVE-2004-1052

CVE-2004-1052: A buffer overflow in the getnickuserhost function of BNC (notably version 2.8.9 and possibly older/newer variants) can be triggered by an IRC server response containing a sequence of many ! or @ characters, allowing remote code execution. Public sources (NVD entry and security advi...

BNC IRC Server Incorrect Password Authentication Bypass

The remote host is running a version of the BNC IRC proxy that contains a flaw in its authentication process that accepted only logins with incorrect passwords. An attacker may use this issue to gain access to the remote IRC proxy server. C Tenable Network Security, Inc. include"compat.inc";...

BNC IRC Server < 2.9.1 Authentication Bypass

Binary data 2404.prm...

BNC < 2.9.1 getnickuserhost IRC Server Response Buffer Overflow

Binary data 2403.prm...

BNC 2.8.9 remote buffer overflow

LSS Security Advisory LSS-2004-11-3 http://security.lss.hr --- Title : BNC 2.8.9 remote buffer overflow Advisory ID : LSS-2004-11-3 Date : November 10th, 2004 Advisory URL: : http://security.lss.hr/en/index.php?page=details&ID=LSS-2004-11-03 Impact : Remote code execution or DoS attack Risk level...

bnc -- remotely exploitable buffer overflow in getnickuserhost

A LSS Security Advisory reports: There is a buffer overflow vulnerability in getnickuserhost function that is called when BNC is processing response from IRC server. Vulnerability can be exploited if attacker tricks user to connect to his fake IRC server that will exploit this vulnerability. If t...

BNC: Input validation flaw

Background BNC is an IRC proxying server Description A flaw exists in the input parsing of BNC where part of the sbufgetmsg function handles the backspace character incorrectly. Impact A remote user could issue commands using fake authentication credentials and possibly gain access to scripts...

[Full-Disclosure] [ GLSA 200410-13 ] BNC: Input validation flaw

Gentoo Linux Security Advisory GLSA 200410-13 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...