XChat /dns Reverse Lookup Response Arbitrary Command Execution

Binary data 1874.prm...

ISC BIND < 8.3.4 Multiple Remote Vulnerabilities (deprecated)

Binary data 1006.prm...

CVE-2004-0154

rpc.mountd in nfs-utils after 1.0.3 and before 1.0.6 allows attackers to cause a denial of service crash via an NFS mount of a directory from a client whose reverse DNS lookup name is different from the forward lookup name...

CVE-2004-0154

rpc.mountd in nfs-utils after 1.0.3 and before 1.0.6 allows attackers to cause a denial of service crash via an NFS mount of a directory from a client whose reverse DNS lookup name is different from the forward lookup name...

CVE-2004-0154

rpc.mountd in nfs-utils after 1.0.3 and before 1.0.6 allows attackers to cause a denial of service crash via an NFS mount of a directory from a client whose reverse DNS lookup name is different from the forward lookup name...

CVE-2004-0154: Undefined Security Weakness

rpc.mountd in nfs-utils after 1.0.3 and before 1.0.6 allows attackers to cause a denial of service crash via an NFS mount of a directory from a client whose reverse DNS lookup name is different from the forward lookup name...

Dameware Mini Remote Control Version 4.2 – Weak Key Agreement Scheme

Title: Dameware Mini Remote Control Version 4.2 – Weak Key Agreement Scheme Versions: Dameware Mini Remote Control Version 4.2 Vulnerability: The latest version of Dameware’s Mini Remote Control System uses a weak key agreement scheme. The scheme consists of the sharing of pointers into a fixed k...

CVE-2004-0071

Directory traversal vulnerability in buildManPage in class.manpagelookup.php for PHP Man Page Lookup 1.2.0 allows remote attackers to read arbitrary files via the command parameter $cmd variable to index.php...

CVE-2004-0071

Summary: CVE-2004-0071 is a directory traversal vulnerability in PHP Man Page Lookup 1.2.0. The issue stems from buildManPage in class.manpagelookup.php, allowing remote attackers to read arbitrary files via the command parameter ($cmd) to index.php. Affected components: PHP Man Page Lookup 1.2.0...

CVE-2004-0071

Directory traversal vulnerability in buildManPage in class.manpagelookup.php for PHP Man Page Lookup 1.2.0 allows remote attackers to read arbitrary files via the command parameter $cmd variable to index.php...

CVE-2004-0071: Undefined Security Weakness

Directory traversal vulnerability in buildManPage in class.manpagelookup.php for PHP Man Page Lookup 1.2.0 allows remote attackers to read arbitrary files via the command parameter $cmd variable to index.php...

CVE-2003-1055

Buffer overflow in the nssldap.so.1 library for Sun Solaris 8 and 9 may allow local users to gain root access via a long hostname in an LDAP lookup...

Low: Red Hat Security Advisory: apache security update for Stronghold

Updated Apache packages are available which fix a security issue by preventing control characters from being written to the error log. The updated packages also include a minor bug fix for modproxy. The Apache HTTP server is a powerful, full-featured, efficient, and freely-available Web server. T...

Windows 2003/XP gethostbyaddr&#40;&#41; NULL pointer bug

If invalid CNAME in reverse lookup zone is specified, gethostbyaddr returns hostent structure with name pointer set to NULL...

CVE-2002-0382

Summary: CVE-2002-0382 affects the XChat IRC client. The issue arises when handling a /dns query, where the DNS reverse lookup can contain shell metacharacters, allowing arbitrary commands to be executed with the user’s privileges. This is caused by XChat passing the resolver/hostname to a shell ...

CVE-2002-0382

XChat IRC client allows remote attackers to execute arbitrary commands via a /dns command on a host whose DNS reverse lookup contains shell metacharacters...

CVE-2002-0698

Buffer overflow in Internet Mail Connector IMC for Microsoft Exchange Server 5.5 allows remote attackers to execute arbitrary code via an EHLO request from a system with a long name as obtained through a reverse DNS lookup, which triggers the overflow in IMC's hello response...

CVE-2002-0382: Undefined Security Weakness

XChat IRC client allows remote attackers to execute arbitrary commands via a /dns command on a host whose DNS reverse lookup contains shell metacharacters...

CVE-2002-0900: Undefined Security Weakness

Buffer overflow in pks PGP public key web server before 0.9.5 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long search argument to the lookup capability...

CVE-2002-0423: Undefined Security Weakness

Buffer overflow in efingerd 1.5 and earlier, and possibly up to 1.61, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a finger request from an IP address with a long hostname that is obtained via a reverse DNS lookup...