351 matches found
Trillian 0.x IRC Module Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/5373/info A buffer overflow condition has been reported in the Trillian IRC module. The condition is due to insecure handling of data extracted from server responses. An attacker in control of a malicious server may explo...
Trillian 0.73/0.74 IRC JOIN Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/5765/info The Trillian IRC module does not sufficiently check bounds on JOIN commands. A malicious IRC server may potentially exploit this condition to cause a denial of service or execute arbitrary code with the privileg...
Trillian 0.73/0.74 IRC PRIVMSG Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/5755/info Trillian is an instant messaging client that supports a number of protocols including IRC, ICQ, MSN. It is available for Microsoft Windows systems. A buffer overflow has been discovered in Trillian version .73 a...
Trillian 3.1.9 - DTD File XML Parser Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/28747/info Trillian is prone to a buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied input. To exploit this issue, an attacker must entice an unsuspecting user to load a...
Trillian Instant Messaging 0.x Credential Encryption Weakness
No description provided by source. source: http://www.securityfocus.com/bid/5677/info The Trillian instant messaging client uses weak encryption to store saved authentication credentials for instant messaging services. The credentials are encrypted by using XOR with a static key that is used with...
Trillian 0.74 IRC Raw Messages Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/5775/info A vulnerability has been reported for Trillian. Reportedly, Trillian is prone to a denial of service condition when certain IRC raw messages are received by the client. This may be exploited by a malicious serve...
Trillian 0.74 IRC Oversized Data Block Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/5777/info A vulnerability has been reported for Trillian. Reportedly, Trillian is prone to a buffer overflow condition when it receives blocks of data that are larger than 4095 bytes. A malicious server may exploit this...
Cerulean Studios Trillian Client 0.74 MSN Module Remote Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/11142/info Trillian is reported prone to a remote buffer overflow vulnerability. This issue occurs due to insufficient boundary checks performed by the application and may allow an attacker to execute arbitrary code on a...
Cerulean Studios Trillian 3.0 - Remote PNG Image File Parsing Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/12703/info A remote buffer overflow vulnerability affects Cerulean Studios Trillian. This issue is due to a failure of the application to securely copy image data into finite process buffers. An attacker may leverage this...
Trillian 0.725/0.73/0.74 IRC User Mode Numeric Remote Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/5769/info Trillian is an instant messaging client that supports a number of protocols including IRC, ICQ, MSN. It is available for Microsoft Windows systems. It has been reported that Trillian does not perform adequate...
Trillian 0.6351/0.7x Identd Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/5733/info Trillian ships with an ident server to facilitate connections to IRC servers that require an ident response before allowing access. A buffer overflow condition exists in the Trillian ident server, which may...
CVE-2012-5824
Trillian 5.1.0.19 does not verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate, a different vulnerability than...
Design/Logic Flaw
Trillian 5.1.0.19 does not verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate, a different vulnerability than...
CVE-2012-5824
CVE-2012-5824 affects Trillian 5.1.0.19: it does not verify the server hostname against the certificate's CN or subjectAltName, enabling MITM via an arbitrary valid certificate. CVSSv2 base score 5.8 (Medium). No fix/version details are provided in the supplied documents.
CVE-2012-5824
Trillian 5.1.0.19 does not verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate, a different vulnerability than...
Windows Gather Trillian Password Extractor
This module extracts account password from Trillian & Trillian Astra v4.x-5.x instant messenger. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Windows Gather Trillian Password Extractor',...
Injecting Fake Updates: Evilgrade
Evilgrade is a modular framework that allows the user to take advantage of poor upgrade implementations by injecting fake updates. It comes with pre-made binaries agents, a working default configuration for fast pentests, and has it’s own WebServer and DNSServer modules. Easy to set up new...
Trillian MSN SSL Certificate Validation Security Bypass Vulnerability
This host is installed with Trillian and is prone to security bypass vulnerability. OpenVAS Vulnerability Test $Id: gbtrillianmsnauthsslcertsecbypassvuln.nasl 5373 2017-02-20 16:27:48Z teissa $ Trillian MSN SSL Certificate Validation Security Bypass Vulnerability Authors: Veerendra GG Copyright:...
Trillian MSN SSL Certificate Validation Security Bypass Vulnerability
Trillian is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2009-4831
Cerulean Studios Trillian 3.1 Basic does not check SSL certificates during MSN authentication, which allows remote attackers to obtain MSN credentials via a man-in-the-middle attack with a spoofed SSL certificate...