Buffer overflows in ircII based clients

Multiple buffer overflows can only be exploited from server side...

Buffer overflows in ircII-based clients

After seeing the BitchX "DoS" problem mentioned the n'th time already, I decided to finally audit ircII based clients to show some worse problems they have. I had been pretty sure for years that malicious servers can exploit them in multiple ways, and I think many others have known it as well. EP...

ircii_exploit.txt

The following exploits are for IrcII4.4. A dcc chat buffer overflow, one is for linux and the other one is for mirc. -- start irciisploit.txt -- / ircii-4.4 exploit by bladi & aLmUDeNa buffer overflow in ircii dcc chat's allow to excute arbitrary Affected: ircII-4.4 Patch: Upgrade to ircII-4.4M...

ide_expl.mrc

; ideexpl.mrc: vade79 - [email protected], www.fakehalo.org. ; ; ircii-4-4 exploit-ported to mirc5.7, works reverse to ircii-4.4.c. You send the chat ; request instead of having them chat you, result is the same. ; ; Wrote directly from ircii-4.4.cfor nix, that someone gave me to port to mirc. ; ...

CVE-2000-0183

Buffer overflow in ircII 4.4 IRC client allows remote attackers to execute commands via the DCC chat capability...

CVE-2000-0183

Technical details about CVE-2000-0183 are not provided in the connected documents available here. Public information in the Initial Description notes a buffer overflow in ircII 4.4 via DCC chat. Monitor for updates.

CVE-2000-0183: Undefined Security Weakness

Buffer overflow in ircII 4.4 IRC client allows remote attackers to execute commands via the DCC chat capability...

FreeBSD-SA-00:11.ircii

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-00:11 Security Advisory FreeBSD, Inc. Topic: ircII port contains a remote overflow Category: ports Module: ircII Announced: 2000-04-10 Credits: Derek Callaway via BugTraq...

CVE-2000-0183

Buffer overflow in ircII 4.4 IRC client allows remote attackers to execute commands via the DCC chat capability...

Michael Sandrof IrcII 4.4-7 - Remote Buffer Overflow

// source: https://www.securityfocus.com/bid/1046/info IrcII is a well-known Internet Relay Chat IRC client for unix. Version 4.4-7 and possibly previous versions are known to be vulnerable to a buffer overflow condition in their direct client-to-client DCC chat implementation. It may be possible...

Michael Sandrof IrcII 4.4-7 - Remote Buffer Overflow

Michael Sandrof IrcII 4.4-7 - Remote Buffer Overflow // source: https://www.securityfocus.com/bid/1046/info IrcII is a well-known Internet Relay Chat IRC client for unix. Version 4.4-7 and possibly previous versions are known to be vulnerable to a buffer overflow condition in their direct...

CVE-1999-0661

CVE-1999-0661 involves multiple widely-used packages (TCP Wrappers 7.6, util-linux 2.9g, wuftpd 2.2 and 2.1f, ircII 2.2.9, OpenSSH 3.4p1, Sendmail 8.12.6) that were replaced at distribution points by a Trojan Horse. The Red Hat advisory and other records corroborate the same core issue: compromis...

CVE-1999-0661: Undefined Security Weakness

A system is running a version of software that was replaced with a Trojan Horse at one of its distribution points, such as 1 TCP Wrappers 7.6, 2 util-linux 2.9g, 3 wuarchive ftpd wuftpd 2.2 and 2.1f, 4 IRC client ircII ircII 2.2.9, 5 OpenSSH 3.4p1, or 6 Sendmail 8.12.6...

[SECURITY] New versions of ircII fixes security problem

David Holland has reported that a remote user may send arbitrary characters - ansi codes - to a users terminal. This is considered harmful. The following versions fix this problem. dpkg -i file.deb will install the referred file. Debian GNU/Linux 1.3.1 alias bo Source archives:...

[SECURITY] New versions of ircII fixes security problem

David Holland has reported that a remote user may send arbitrary characters - ansi codes - to a users terminal. This is considered harmful. The following versions fix this problem. dpkg -i file.deb will install the referred file. Debian GNU/Linux 1.3.1 alias bo -------------------------------...