144 matches found
CVE-2005-0199: Integer Underflow (Wrap or Wraparound)
Integer underflow in the ListsMakeMask function in lists.c in ngIRCd before 0.8.2 allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a long MODE line that causes an incorrect length calculation, which leads to a buffer overflow...
CVE-2005-0226: Undefined Security Weakness
Format string vulnerability in the LogResolver function in log.c for ngIRCd 0.8.2 and earlier, when compiled with IDENT, logging to SYSLOG, and with DEBUG enabled, allows remote attackers to execute arbitrary code...
ngIRCd <= 0.8.1 Remote Denial of Service Exploit (2)
No description provided by source. / Ip under usage is actually port /str0ke / / -=x0n3-h4ck=--=00:48:19=--=/root=--=Account: root=- -= ./ngircddos x0n3-h4ck.org 12345 Angel DarkChan -= NGircd = 0.8.1 Remote DoS ::: Coded by Expanders =- Connecting to target ...Done Building evil buffer ...Done...
ngIRCd 0.8.1 - Remote Denial of Service (2)
/ Ip under usage is actually port /str0ke / / -=x0n3-h4ck=--=00:48:19=--=/root=--=Account: root=- -= ./ngircddos x0n3-h4ck.org 12345 Angel DarkChan -= NGircd Attack Success! Lets party! The Irc Server is Killed !! Exploit: NGircd NOTE: The channel must be EMPTY to let the exploit use +I mode...
ngIRCd 0.8.1 - Remote Denial of Service (2)
ngIRCd 0.8.1 - Remote Denial of Service 2 / Ip under usage is actually port /str0ke / / -=x0n3-h4ck=--=00:48:19=--=/root=--=Account: root=- -= ./ngircddos x0n3-h4ck.org 12345 Angel DarkChan -= NGircd Attack Success! Lets party! The Irc Server is Killed !! Exploit: NGircd NOTE: The channel must be...
ngIRCd <= 0.8.1 Remote Denial of Service Exploit (2)
Exploit for linux platform in category dos / poc ==================================================== ngIRCd Attack Success! Lets party! The Irc Server is Killed !! Exploit: NGircd NOTE: The channel must be EMPTY to let the exploit use +I mode Example: / include include include include include...
ngIRCd < 0.8.3 Log_Resolver() Remote Format String Overflow
Binary data 2591.prm...
ngIRCd Internet Relay Chat daemon format string bug
Format string bug in logging feature...
ngIRCd <= v0.8.2 Format String Vulnerability
------------------------------------------------- No System Group - Advisory 11 - 03/02/05 ------------------------------------------------- Program: ngIRCd Homepage: http://arthur.ath.cx/alex/ngircd/ Operating System: Linux and Unix-Compatible Vulnerable Versions: ngIRCd v0.8.2 and prior Risk:...
CVE-2005-0226
Format string vulnerability in the LogResolver function in log.c for ngIRCd 0.8.2 and earlier, when compiled with IDENT, logging to SYSLOG, and with DEBUG enabled, allows remote attackers to execute arbitrary code...
ngIRCd 0.8.2 - Remote Format String
ngIRCd 0.8.2 - Remote Format String / ngircdfsexp.c ngIRCd Use: ./ngircdfsexp -h options options: -h host or IP -p ircd port by default 6667 -t type of target system -g syslog GOT address -o offset RET addr by default 0x0806b000 -b brutefoce the RET address from 0x0806b000 + offset -l targets lis...
ngircd -- format string vulnerability
A No System Group security advisory reports that ngircd is vulnerable to a format string vulnerability in the LogResolver function of log.c, if IDENT support is enabled. This could allow a remote attacker to execute arbitrary code with the permissions of the ngircd daemon, which is root by defaul...
ngIRCd <= 0.8.2 Remote Format String Exploit
Exploit for linux platform in category remote exploits ============================================ ngIRCd Use: ./ngircdfsexp -h options options: -h host or IP -p ircd port by default 6667 -t type of target system -g syslog GOT address -o offset RET addr by default 0x0806b000 -b brutefoce the RET...
ngIRCd <= 0.8.2 Remote Format String Exploit
No description provided by source. / ngircdfsexp.c ngIRCd = 0.8.2 remote format string exploit Note: To obtain a successful exploitation, we need that ngIRCd has been compiled with IDENT, logging to SYSLOG and DEBUG enabled. Original Reference: http://www.nosystem.com.ar/advisories/advisory-11.tx...
ngIRCd < 0.8.3 Log_Resolver() Format String
According to its banner, the version of the ngIRCd chat service running on the remote host contains a format string vulnerability. If it was compiled with IDENT, DEBUG is enabled, and it's logging to SYSLOG, a remote attacker can leverage this issue to execute arbitrary code on the remote host...
ngIRCd 0.8.2 - Remote Format String
/ ngircdfsexp.c ngIRCd Use: ./ngircdfsexp -h options options: -h host or IP -p ircd port by default 6667 -t type of target system -g syslog GOT address -o offset RET addr by default 0x0806b000 -b brutefoce the RET address from 0x0806b000 + offset -l targets list root@servidor:/home/coki/audit...
[ GLSA 200501-40 ] ngIRCd: Buffer overflow
Gentoo Linux Security Advisory GLSA 200501-40 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...
ngIRCd Internet Relay Chat server integer overflow
Integer overflow in ListsMakeMask leads to buffer overflow...
ngIRCd < 0.8.2 Lists_MakeMask() Remote Overflow DoS
According to its banner, the version of the ngIRCd chat service on the remote host contains a buffer overflow in 'ListsMakeMask' in 'src/ngircd/lists.c' that can be exploited by a remote attacker to crash the affected service or possibly even execute arbitrary code on the remote host subject to t...