[SECURITY] [DSA 1744-1] New weechat packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA-1744-1 [email protected] http://www.debian.org/security/ Nico Golde March 18th, 2009 http://www.debian.org/security/faq -...

DSA-1744-1 weechat - denial of service

Bulletin has no description...

Crlf injection

Multiple CRLF injection vulnerabilities in the 1 now-playing.rb and 2 xmms.pl 1.1 scripts for WeeChat allow user-assisted remote attackers to execute arbitrary IRC commands via CRLF sequences in the name of the song in a .mp3 file...

CVE-2007-4398

Multiple CRLF injection vulnerabilities in the 1 now-playing.rb and 2 xmms.pl 1.1 scripts for WeeChat allow user-assisted remote attackers to execute arbitrary IRC commands via CRLF sequences in the name of the song in a .mp3 file...

CVE-2007-4398

Multiple CRLF injection vulnerabilities in the 1 now-playing.rb and 2 xmms.pl 1.1 scripts for WeeChat allow user-assisted remote attackers to execute arbitrary IRC commands via CRLF sequences in the name of the song in a .mp3 file...

CVE-2007-4398

Multiple CRLF injection vulnerabilities in the 1 now-playing.rb and 2 xmms.pl 1.1 scripts for WeeChat allow user-assisted remote attackers to execute arbitrary IRC commands via CRLF sequences in the name of the song in a .mp3 file...

DEBIAN-CVE-2007-4398

Multiple CRLF injection vulnerabilities in the 1 now-playing.rb and 2 xmms.pl 1.1 scripts for WeeChat allow user-assisted remote attackers to execute arbitrary IRC commands via CRLF sequences in the name of the song in a .mp3 file...

CVE-2007-4398

Multiple CRLF injection vulnerabilities in the 1 now-playing.rb and 2 xmms.pl 1.1 scripts for WeeChat allow user-assisted remote attackers to execute arbitrary IRC commands via CRLF sequences in the name of the song in a .mp3 file...

CVE-2007-4398

CVE-2007-4398 affects WeeChat scripts now-playing.rb and xmms.pl 1.1. Multiple CRLF injection vulnerabilities allow user-assisted remote attackers to execute arbitrary IRC commands via CRLF sequences in the name field of a .mp3 file. Root cause: CRLF injection in parsing/handling of the song name...

CVE-2007-4398

Multiple CRLF injection vulnerabilities in the 1 now-playing.rb and 2 xmms.pl 1.1 scripts for WeeChat allow user-assisted remote attackers to execute arbitrary IRC commands via CRLF sequences in the name of the song in a .mp3 file...