CVE-2009-2658

Directory traversal vulnerability in ZNC before 0.072 allows remote attackers to overwrite arbitrary files via a crafted DCC SEND request...

CVE-2009-2658

Summary of vulnerability (CVE-2009-2658) : ZNC (IRC bouncer) is affected by a directory traversal flaw present in versions before 0.072, exploitable via a crafted DCC SEND request to overwrite arbitrary files with the user’s privileges. Available connected advisories confirm the issue and cite po...

znc IRC proxy directory traversal

Directory traversal on DCC request...

[SECURITY] [DSA 1848-1] New znc packages fix remote code execution

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1848-1 [email protected] http://www.debian.org/security/ Florian Weimer August 02, 2009 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1848-1] New znc packages fix remote code execution

------------------------------------------------------------------------ Debian Security Advisory DSA-1848-1 [email protected] http://www.debian.org/security/ Florian Weimer August 02, 2009 http://www.debian.org/security/faq -...

DSA-1848-1 znc - directory traversal

Bulletin has no description...

Fedora Core 10 FEDORA-2009-7937 (znc)

The remote host is missing an update to znc announced via advisory FEDORA-2009-7937. OpenVAS Vulnerability Test $Id: fcore20097937.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-7937 znc Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

Fedora Core 10 FEDORA-2009-7937 (znc)

The remote host is missing an update to znc announced via advisory FEDORA-2009-7937. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Fedora Core 11 FEDORA-2009-7952 (znc)

The remote host is missing an update to znc announced via advisory FEDORA-2009-7952. OpenVAS Vulnerability Test $Id: fcore20097952.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-7952 znc Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

Fedora Core 11 FEDORA-2009-7952 (znc)

The remote host is missing an update to znc announced via advisory FEDORA-2009-7952. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

ZNC Detection (IRC)

IRC based detection ZNC. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.100243";...

ZNC < 0.072 File Upload Directory Traversal Vulnerability

ZNC is prone to a directory traversal vulnerability because it fails to sufficiently sanitize user-supplied input. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Fedora 11 : znc-0.072-3.fc11 (2009-7952)

No CVE yet, one has been requested. Upgrade to 0.072 of ZNC, fixes security issue in bug 513152 An users data directory traversal flaw was found in the way ZNC used to handle file upload requests via Direct Client Connection DCC /dcc SEND messages. A remote IRC user could issue a /dcc SEND messag...

Fedora 10 : znc-0.072-3.fc10 (2009-7937)

No CVE yet, one has been requested. Upgrade to 0.072 of ZNC, fixes security issue in bug 513152 An users data directory traversal flaw was found in the way ZNC used to handle file upload requests via Direct Client Connection DCC /dcc SEND messages. A remote IRC user could issue a /dcc SEND messag...

[SECURITY] Fedora 11 Update: znc-0.072-3.fc11

ZNC is an IRC bouncer with many advanced features like detaching, multiple users, per channel playback buffer, SSL, IPv6, transparent DCC bouncing, Perl and C++ module support to name a few...

[SECURITY] Fedora 10 Update: znc-0.072-3.fc10

ZNC is an IRC bouncer with many advanced features like detaching, multiple users, per channel playback buffer, SSL, IPv6, transparent DCC bouncing, Perl and C++ module support to name a few...

Debian Security Advisory DSA 1735-1 (znc)

The remote host is missing an update to znc announced via advisory DSA 1735-1. OpenVAS Vulnerability Test $Id: deb17351.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1735-1 znc Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

Debian: Security Advisory (DSA-1735-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[Backports-security-announce] Security Update for znc

Patrick Matthäi uploaded new packages for znc which fixed the following security problems: CVE-2009-0759, Debian BTS 516950 It was discovered that znc, an IRC proxy/bouncer, does not properly sanitize input contained in configuration change requests to the webadmin interface. This allows...

[Backports-security-announce] Security Update for znc

Patrick Matthäi uploaded new packages for znc which fixed the following security problems: CVE-2009-0759, Debian BTS 516950 It was discovered that znc, an IRC proxy/bouncer, does not properly sanitize input contained in configuration change requests to the webadmin interface. This allows...