trillian DoS: trillian 1.0 pro also vulnerable

followup to Lance Fitz-Herbert aka phrizer's find earlier today. trillian pro 1.0 is also vulnerable to the DoS. no need to run C code, perl and netcat do it: perl -e 'print "A"x450; print "n"' | nc ip 113 same precautions ... disable or filter identd on that host. enjoy. jose nazario, ph.d...

Trillian 0.73/0.74 - IRC PRIVMSG Buffer Overflow

// source: https://www.securityfocus.com/bid/5755/info Trillian is an instant messaging client that supports a number of protocols including IRC, ICQ, MSN. It is available for Microsoft Windows systems. A buffer overflow has been discovered in Trillian version .73 and .74. When processing a PRIVM...

Trillian 0.63510.7x - Identd Buffer Overflow

Trillian 0.63510.7x - Identd Buffer Overflow // source: https://www.securityfocus.com/bid/5733/info Trillian ships with an ident server to facilitate connections to IRC servers that require an ident response before allowing access. A buffer overflow condition exists in the Trillian ident server,...

Trillian 0.6351/0.7x - Identd Buffer Overflow

// source: https://www.securityfocus.com/bid/5733/info Trillian ships with an ident server to facilitate connections to IRC servers that require an ident response before allowing access. A buffer overflow condition exists in the Trillian ident server, which may potentially be exploited to cause a...

Trillian Instant Messaging 0.x - Credential Encryption

// source: https://www.securityfocus.com/bid/5677/info The Trillian instant messaging client uses weak encryption to store saved authentication credentials for instant messaging services. The credentials are encrypted by using XOR with a static key that is used with every installation of the...

Trillian XML parser buffer overflow

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Problem: It is possible to create a skin for trillian that will trigger a buffer overflow. In trillian.xml under the prefs section. control name="colors" type="colors" colors file="4096 characters" Still no word from Cerulean Studios on when a fix wil...

Buffer overflow in Trillian

Buffer overflow on skin file parsing...

trillian buffer overflow

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Problem: Trillian's irc modules suffers from a buffer overflow. This allows an attacker to execute code of their choice. I have attempted to contact the trillian developers about this issue with no success. John C. Hennessy Information security analys...

Two more exploitable holes in the trillian irc module

Sent the following advisory to trillian: Tue, 16 Jul 2002 16:49:19 -0400 EDT Submitted by : Josh [email protected], omega [email protected] on July 16th, 2002 Vulnerability : Format strings bug and buffer overflow in the IRC client of Trillian Tested On : Trillian v0.73,0.72 Remote : Yes Gree...

Trillian 0.x IRC Module - Remote Buffer Overflow

Trillian 0.x IRC Module - Remote Buffer Overflow source: https://www.securityfocus.com/bid/5373/info A buffer overflow condition has been reported in the Trillian IRC module. The condition is due to insecure handling of data extracted from server responses. An attacker in control of a malicious...

Trillian 0.x IRC Module - Remote Buffer Overflow

source: https://www.securityfocus.com/bid/5373/info A buffer overflow condition has been reported in the Trillian IRC module. The condition is due to insecure handling of data extracted from server responses. An attacker in control of a malicious server may exploit vulnerable clients who have...