Trillian IRC Oversized Data Block Remote Overflow DoS

Binary data 1868.prm...

BitchX IRC Client DNS Response Remote Overflow

Binary data 1856.prm...

BitchX IRC Client "/INVITE" Command Format String DoS

Binary data 1855.prm...

CGI:IRC Server Detection

Binary data 3530.prm...

Multiple IRC Client Non-registered User parse_client_queued Saturation DoS

The remote host is running a version of ircd which is vulnerable to a rate-limiting Denial of Service DoS attack. The flaw is in the fact that the IRCD daemon reserves more than 500 bytes of memory for each line received. An attacker, exploiting this flaw, would need network access to the IRC...

Mandrake Linux Security Advisory : kernel (MDKSA-2002:041)

A problem was discovered in the CIPE VPN tunnel implementation in the Linux kernel where a malformed packet could cause a crash. Andrew Griffiths discovered a vulnerability that allows remote machines to read random memory by utilizing a bug in the ICMP implementation of Linux kernels. This only...

CVE-2004-0605

Non-registered IRC users using 1 ircd-hybrid 7.0.1 and earlier, 2 ircd-ratbox 1.5.1 and earlier, or 3 ircd-ratbox 2.0rc6 and earlier do not have a rate-limit imposed, which could allow remote attackers to cause a denial of service by repeatedly making requests, which are slowly dequeued...

CVE-2004-0605

The CVE-2004-0605 entry applies to IRC daemons that fail to rate-limit non-registered users, causing a Denial of Service. Affected: ircd-hybrid <= 7.0.1, ircd-ratbox

PISG 0.54 - IRC Nick HTML Injection

source: https://www.securityfocus.com/bid/10195/info pisg has been reported prone to an input validation vulnerability. The issue will only present itself when pisg is used to monitor an IRC server that does not place limitations on IRC Nick values that can be used. If an attacker specifies HTML...

[Full-Disclosure] pisg XSS

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ========================================================================= = pisg XSS ========================================================================= pisg is an IRC channel statics generator written in Perl, it creates statistics from differe...

PISG 0.54 - IRC Nick HTML Injection

PISG 0.54 - IRC Nick HTML Injection source: https://www.securityfocus.com/bid/10195/info pisg has been reported prone to an input validation vulnerability. The issue will only present itself when pisg is used to monitor an IRC server that does not place limitations on IRC Nick values that can be...

DoS in Crackalaka 1.0.8

Donato Ferrante Application: Crackalaka http://www.stalphonsos.com/attila/crackalaka Version: 1.0.8 Bug: Denial Of Service Date: 09-Apr-2004 Author: Donato Ferrante e-mail: [email protected] web: www.autistici.org/fdonato xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx...

Crackalaka IRC Server 1.0.8 - Remote Denial of Service

source: https://www.securityfocus.com/bid/10092/info It has been reported that Crackalaka may be prone to a remote denial of service vulnerability that may allow an attacker to crash the server by sending an excessive amount of data. Crackalaka version 1.0.8 is reported to be prone to this issue,...

CVE-2003-1377

Buffer overflow in the reverse DNS lookup of Smart IRC Daemon SIRCD 0.4.0 and 0.4.4 allows remote attackers to execute arbitrary code via a client with a long hostname...

SIRCD Server 0.5.20.5.3 - Operator Privilege Escalation

SIRCD Server 0.5.20.5.3 - Operator Privilege Escalation source: https://www.securityfocus.com/bid/9097/info sircd has been reported prone to a privilege escalation vulnerability. It has been reported that any user logged on to the sircd server, may set their usermode to +o, or operator mode. An...

Gaim IRC Local Account Information Leakage

When logging into IRC via gaim, gaim registers the user with their valid local account id as well as the nick chosen by the end user. This is revealed when an attacker asks for information regarding the victim. Given that the host name DNS/IP is also registered, an attacker now knows both the...

GAIM information leak

IRC plugins registers user's IP and accoun...

DSA-399 epic4 - buffer overflow

Bulletin has no description...

Unichat Vulnerabilities

Author: DarkKnight My site: http://www.insecureonline.com Product: Unichat Vendor Info.: Did not respond //Quote// "Come here," said the Spider to the Fly. Respected Just a few: ------------------- http://securityfocus.com http://eeye.com http://packetstormsecurity.nl http://jinxhackwear.com...

asl_plz.txt

Hi all, just camed today at work and i started sniffing a bit using ngrep http://www.packetfactory.net/projects/ngrep/, guess what ive got? Thousand of freaks yeah of course Undernet using this fake DCCs, but not only as private messages this has taken the following form /msg channel DCC SEND...