ngIRCd JOIN命令解析拒绝服务漏洞

ngIRCd是一款流行的IRC聊天服务程序。 ngIRCd处理JOIN命令存在问题，远程攻击者可以利用漏洞对系统进行拒绝服务攻击。 目前没有详细漏洞细节提供。 ngIRCd ngIRCd 0.10.2 ngIRCd ngIRCd 0.8.2 ngIRCd ngIRCd 0.8.1 ngIRCd ngIRCd 0.8 ngIRCd ngIRCd 0.7.7 ngIRCd ngIRCd 0.7.6 ngIRCd ngIRCd 0.7.5 ngIRCd ngIRCd 0.7.1 ngIRCd ngIRCd 0.7 ngIRCd ngIRCd 0.6.1 ngIRCd ngIRCd 0.6...

CVE-2007-4532

Soldat game server 1.4.2 and earlier, and dedicated server 2.6.2 and earlier, allows remote attackers to cause a denial of service client lockout via a series of UDP join packets from a spoofed IP address, which triggers temporary blacklisting of this IP address...

Code injection

Soldat game server 1.4.2 and earlier, and dedicated server 2.6.2 and earlier, allows remote attackers to cause a denial of service client lockout via a series of UDP join packets from a spoofed IP address, which triggers temporary blacklisting of this IP address...

CVE-2007-4532

Soldat game server 1.4.2 and earlier, and dedicated server 2.6.2 and earlier, allows remote attackers to cause a denial of service client lockout via a series of UDP join packets from a spoofed IP address, which triggers temporary blacklisting of this IP address...

Design/Logic Flaw

Zoidcom 0.6.7 and earlier allows remote attackers to cause a denial of service application crash via a JOIN packet aka connection packet containing 0x69 in the ninth byte, which triggers a "double-delete" of trace data, a different vulnerability than CVE-2005-1643...

CVE-2007-4358

Zoidcom 0.6.7 and earlier allows remote attackers to cause a denial of service application crash via a JOIN packet aka connection packet containing 0x69 in the ninth byte, which triggers a "double-delete" of trace data, a different vulnerability than CVE-2005-1643...

CVE-2007-4358

CVE-2007-4358 affects Zoidcom 0.6.7 and earlier. A JOIN/connection packet containing 0x69 in the ninth byte triggers a double-delete of trace data, leading to denial of service (application crash). This is described as a separate issue from CVE-2005-1643. Affected component: Zoidcom’s handling of...

CVE-2007-4358

Zoidcom 0.6.7 and earlier allows remote attackers to cause a denial of service application crash via a JOIN packet aka connection packet containing 0x69 in the ninth byte, which triggers a "double-delete" of trace data, a different vulnerability than CVE-2005-1643...

Visual IRC Join命令响应远程栈溢出漏洞

BUGTRAQ ID: 24798 Visual IRC（ViRC）是一个聊天客户端软件，可以进行仿真的语音聊天和图象传输。 Visual IRC在处理服务器回应数据时存在缓冲区溢出漏洞，远程恶意IRC服务器可能利用此漏洞控制用户机器。 如果Visual IRC用户受骗连接到了恶意的IRC服务器的话，则客户端在处理服务器所发送的超长JOIN命令响应时可能会触发栈溢出，导致执行任意指令。 Jesse McGrew Visual IRC 2.0 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.visualirc.net/...

ViRC 2.0 (JOIN Response) Remote SEH Overwrite Exploit 0day

No description provided by source. !/usr/bin/python ViRC 2.0 'JOIN Response' 0day Remote SEH Overwrite PoC Exploit Bug discovered by Krystian Kloskowski h07 [email protected] Tested on Visual IRC 2.0 / 2k SP4 Polish Shellcode type: Windows Execute Command calc.exe How stuff works ? .. ViRC -----...

Stack overflow

Stack-based buffer overflow in Visual IRC ViRC 2.0 allows remote IRC servers to execute arbitrary code via a long response to a JOIN command...

CVE-2007-3612

Stack-based buffer overflow in Visual IRC ViRC 2.0 allows remote IRC servers to execute arbitrary code via a long response to a JOIN command...

CVE-2007-3612

Stack-based buffer overflow in Visual IRC ViRC 2.0 allows remote IRC servers to execute arbitrary code via a long response to a JOIN command...

ViRC 2.0 - JOIN Response Remote Overwrite (SEH)

ViRC 2.0 - JOIN Response Remote Overwrite SEH !/usr/bin/python ViRC 2.0 'JOIN Response' 0day Remote SEH Overwrite PoC Exploit Bug discovered by Krystian Kloskowski h07 Tested on Visual IRC 2.0 / 2k SP4 Polish Shellcode type: Windows Execute Command calc.exe How stuff works ? .. ViRC ----- ..JOIN...

ViRC 2.0 - JOIN Response Remote Overwrite (SEH)

!/usr/bin/python ViRC 2.0 'JOIN Response' 0day Remote SEH Overwrite PoC Exploit Bug discovered by Krystian Kloskowski h07 Tested on Visual IRC 2.0 / 2k SP4 Polish Shellcode type: Windows Execute Command calc.exe How stuff works ? .. ViRC ----- ..JOIN.. ------------- exploittunnel...

MDKSA-2005:220 - Updated kernel packages fix numerous vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDKSA-2005:220 http://www.mandriva.com/security/ Package : kernel Date : November 30, 2005 Affected: 10.2 Problem Description: Multiple vulnerabilities in the Linux 2.6 kernel have been discovered and corrected in this...

Multiple IBM DB2 Universal Database vulnerabilities

Server crash on constant string processing in queries; endless loop on hash joins processing; multiple problems with invalid connection termination; unauthorized creation of routine based objects; array overflow on oversized number of elements in 'in' list; db2jd crash on certain clients...

CVE-2005-0849

CVE-2005-0849 affects multiple FUN labs games (e.g., 4X4 Off-road Adventure III, Big Game Hunter, Dangerous Hunts, Deer Hunt, Revolution, Secret Service, Shadow Force, US Most Wanted). The vulnerability is a remote DoS due to a malformed join packet that can cause the server to copy more memory t...

CVE-2004-1207

The Serious engine, as used in 1 Alpha Black Zero Intrepid Protocol 1.04 and earlier, 2 Nitro family, and 3 Serious Sam Second Encounter 1.07 allows remote attackers to cause a denial of service server crash via a large number of UDP join requests that exceeds the maximum player limit, as...

CVE-2004-1207

The Serious engine, as used in 1 Alpha Black Zero Intrepid Protocol 1.04 and earlier, 2 Nitro family, and 3 Serious Sam Second Encounter 1.07 allows remote attackers to cause a denial of service server crash via a large number of UDP join requests that exceeds the maximum player limit, as...