CVE-2020-5302

MH-WikiBot (an IRC bot) suffered an access-control vulnerability: unprivileged users could invoke steward commands by impersonating a privileged user’s nickname on the IRC interface due to a missing login verification. The issue has been fixed in commit 23d9d5b0a59667a5d6816fdabb960b537a5f9ed1. T...

CVE-2020-5302

MH-WikiBot an IRC Bot for interacting with the Miraheze API, had a bug that allowed any unprivileged user to access the steward commands on the IRC interface by impersonating the Nickname used by a privileged user as no check was made to see if they were logged in. The issue has been fixed in...

CVE-2020-5302 unprivileged user can access priviledged action in MH-WikiBot

MH-WikiBot an IRC Bot for interacting with the Miraheze API, had a bug that allowed any unprivileged user to access the steward commands on the IRC interface by impersonating the Nickname used by a privileged user as no check was made to see if they were logged in. The issue has been fixed in...

QEMU: slirp: OOB buffer access while emulating tcp protocols in tcp_emu()

A heap buffer overflow issue was found in the SLiRP networking implementation of the QEMU emulator. This flaw occurs in the tcpemu routine while emulating IRC and other protocols. An attacker could use this flaw to crash the QEMU process on the host, resulting in a denial of service or potential...

QEMU: Slirp: potential OOB access due to unsafe snprintf() usages

An out-of-bounds heap buffer access flaw was found in the SLiRP networking implementation of the QEMU emulator. This flaw occurs in tcpemu routine while emulating IRC and other protocols due to unsafe usage of the snprintf3 function. A user or process could use this flaw to crash the QEMU process...

PT-2020-18391

Name of the Vulnerable Software and Affected Versions MH-WikiBot affected versions not specified Description The issue allowed unprivileged users to access steward commands on the IRC interface by impersonating the nickname of a privileged user, as no login check was performed. Recommendations At...

CVE-2020-5302: Improper Access Control

MH-WikiBot an IRC Bot for interacting with the Miraheze API, had a bug that allowed any unprivileged user to access the steward commands on the IRC interface by impersonating the Nickname used by a privileged user as no check was made to see if they were logged in. The issue has been fixed in...

[SECURITY] Fedora 32 Update: weechat-2.7.1-1.fc32

WeeChat Wee Enhanced Environment for Chat is a portable, fast, light and extensible IRC client. Everything can be done with a keyboard. It is customizable and extensible with scripts...

GLSA-202003-51 : WeeChat: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202003-51 WeeChat: Multiple vulnerabilities Multiple vulnerabilities have been discovered in WeeChat. Please review the CVE identifiers referenced below for details. Impact : A remote attacker, by sending a specially crafted IRC...

WeeChat: Multiple vulnerabilities

Background Wee Enhanced Environment for Chat WeeChat is a light and extensible console IRC client. Description Multiple vulnerabilities have been discovered in WeeChat. Please review the CVE identifiers referenced below for details. Impact A remote attacker, by sending a specially crafted IRC...

CVE-2020-9760

An issue was discovered in WeeChat before 2.7.1 0.3.4 to 2.7 are affected. When a new IRC message 005 is received with longer nick prefixes, a buffer overflow and possibly a crash can happen when a new mode is set for a nick...

DEBIAN-CVE-2020-9760

An issue was discovered in WeeChat before 2.7.1 0.3.4 to 2.7 are affected. When a new IRC message 005 is received with longer nick prefixes, a buffer overflow and possibly a crash can happen when a new mode is set for a nick...

CVE-2020-9760

An issue was discovered in WeeChat before 2.7.1 0.3.4 to 2.7 are affected. When a new IRC message 005 is received with longer nick prefixes, a buffer overflow and possibly a crash can happen when a new mode is set for a nick...

Buffer overflow

An issue was discovered in WeeChat before 2.7.1 0.3.4 to 2.7 are affected. When a new IRC message 005 is received with longer nick prefixes, a buffer overflow and possibly a crash can happen when a new mode is set for a nick...

CVE-2020-9760

An issue was discovered in WeeChat before 2.7.1 0.3.4 to 2.7 are affected. When a new IRC message 005 is received with longer nick prefixes, a buffer overflow and possibly a crash can happen when a new mode is set for a nick...

CVE-2020-9760

An issue was discovered in WeeChat before 2.7.1 0.3.4 to 2.7 are affected. When a new IRC message 005 is received with longer nick prefixes, a buffer overflow and possibly a crash can happen when a new mode is set for a nick...

CVE-2020-9760

An issue was discovered in WeeChat before 2.7.1 0.3.4 to 2.7 are affected. When a new IRC message 005 is received with longer nick prefixes, a buffer overflow and possibly a crash can happen when a new mode is set for a nick...

CVE-2020-9760

An issue was discovered in WeeChat before 2.7.1 0.3.4 to 2.7 are affected. When a new IRC message 005 is received with longer nick prefixes, a buffer overflow and possibly a crash can happen when a new mode is set for a nick...

CVE-2020-9760

WeeChat prior to 2.7.1 (affecting 0.3.4–2.7) contains a buffer overflow in handling IRC message 005 when longer nick prefixes trigger a new nick mode; this can crash the client (denial of service). Upgrading to WeeChat 2.7.1 or newer is the stated mitigation. Related advisories reference CVE-2020...

CVE-2020-9760

An issue was discovered in WeeChat before 2.7.1 0.3.4 to 2.7 are affected. When a new IRC message 005 is received with longer nick prefixes, a buffer overflow and possibly a crash can happen when a new mode is set for a nick...