Trillian 0.730.74 - IRC PRIVMSG Buffer Overflow

Trillian 0.730.74 - IRC PRIVMSG Buffer Overflow // source: https://www.securityfocus.com/bid/5755/info Trillian is an instant messaging client that supports a number of protocols including IRC, ICQ, MSN. It is available for Microsoft Windows systems. A buffer overflow has been discovered in...

Trillian .73 & .74 "PRIVMSG" Overflow.

Discovered: ----------- 02 September 2002 By Me, Lance Fitz-Herbert aka phrizer. Vulnerable Applications: ------------------------ Tested On Trillian .74 and .74, But im guessing older versions are also vulnerable. Impact: ------- Low-High. This could possibly allow arbitary code to be executed o...

Trillian 0.73/0.74 - IRC PRIVMSG Buffer Overflow

// source: https://www.securityfocus.com/bid/5755/info Trillian is an instant messaging client that supports a number of protocols including IRC, ICQ, MSN. It is available for Microsoft Windows systems. A buffer overflow has been discovered in Trillian version .73 and .74. When processing a PRIVM...

CVE-2002-0928

The CVE-2002-0928 entry concerns Pirch 98 IRC client. A buffer overflow in the handling of a long hyperlink in a channel or private message can lead to denial of service and may allow arbitrary code execution. The affected product is the Pirch 98 IRC client; the exact vulnerable component is desc...

CVE-2002-0983

IRC client irssi in irssi-text before 0.8.4 allows remote attackers to cause a denial of service crash via an IRC channel that has a long topic followed by a certain string, possibly triggering a buffer overflow...

CVE-2002-0983

CVE-2002-0983 affects the IRC client component irssi-text in irssi, prior to version 0.8.4. The vulnerability allows a remote attacker to cause a denial of service (crash) by joining a channel whose topic is excessively long and followed by a specific string, potentially triggering a buffer overf...

DSA-156 epic4-script-light - arbitrary script execution

Bulletin has no description...

Important: Red Hat Security Advisory: xchat security update

A security issue in XChat allows a malicious server to execute arbitrary commands. XChat is a popular cross-platform IRC client. Versions of XChat prior to 1.8.9 do not filter the response from an IRC server when a /dns query is executed. Because XChat resolves hostnames by passing the configured...

trillian buffer overflow

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Problem: Trillian's irc modules suffers from a buffer overflow. This allows an attacker to execute code of their choice. I have attempted to contact the trillian developers about this issue with no success. John C. Hennessy Information security analys...

Two more exploitable holes in the trillian irc module

Sent the following advisory to trillian: Tue, 16 Jul 2002 16:49:19 -0400 EDT Submitted by : Josh [email protected], omega [email protected] on July 16th, 2002 Vulnerability : Format strings bug and buffer overflow in the IRC client of Trillian Tested On : Trillian v0.73,0.72 Remote : Yes Gree...

Trillian 0.x IRC Module - Remote Buffer Overflow

Trillian 0.x IRC Module - Remote Buffer Overflow source: https://www.securityfocus.com/bid/5373/info A buffer overflow condition has been reported in the Trillian IRC module. The condition is due to insecure handling of data extracted from server responses. An attacker in control of a malicious...

Trillian 0.x IRC Module - Remote Buffer Overflow

source: https://www.securityfocus.com/bid/5373/info A buffer overflow condition has been reported in the Trillian IRC module. The condition is due to insecure handling of data extracted from server responses. An attacker in control of a malicious server may exploit vulnerable clients who have...

CVE-2002-0060

IRC connection tracking helper module in the netfilter subsystem for Linux 2.4.18-pre9 and earlier does not properly set the mask for conntrack expectations for incoming DCC connections, which could allow remote attackers to bypass intended firewall restrictions...

CVE-2002-0382

XChat IRC client allows remote attackers to execute arbitrary commands via a /dns command on a host whose DNS reverse lookup contains shell metacharacters...

Pirch IRC 98 Client - Malformed Link Buffer Overrun

source: https://www.securityfocus.com/bid/5079/info Pirch is subject to a buffer overflow condition. The overrun occurs if a user receives on a maliciously constructed link. It is not confirmed whether the user must first click on the link or not. This issue is the result of inadequate bounds...

CVE-2002-0593

Buffer overflow in Netscape 6 and Mozilla 1.0 RC1 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long channel name in an IRC URI...

Remote Hole in IRC Client and Stuff

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 GOBBLES http://www.bugtraq.org ================================ GOBBLES Security Labs GSL is currently the largest non-profit security team in the world, with over 17 active members that are dedicated to bringing cutting edge material to the public th...

Ayman Akt IRCIT 0.3.1 - Invite Message Remote Buffer Overflow

// source: https://www.securityfocus.com/bid/4998/info IRCIT is a terminal based IRC client for Linux and Unix systems. IRCIT contains a remote buffer overflow vulnerability. When a INVITE message is received, the supplied from user data is copied into a fixed buffer of length MAXHOSTLEN. A...

CVE-2002-0593

CVE-2002-0593: A buffer overflow in Netscape 6 and Mozilla 1.0 RC1 and earlier can be triggered by a long channel name in an IRC URI, allowing remote DoS and possibly arbitrary code execution. Affected software is Netscape 6 and Mozilla 1.0 RC1 and earlier; the underlying issue is a buffer overfl...

Important: Red Hat Security Advisory: : : : Updated xchat packages fix "/dns" vulnerability

A security vulnerability in XChat allows a malicious server to execute arbitrary commands. Updated 11 July 2003 Added packages for Red Hat Linux on IBM iSeries and pSeries systems. XChat is a popular cross-platform IRC client. Versions of XChat prior to 1.8.9 do not filter the response from an IR...