Description
Multiple buffer overflows in ircII 20020912 allows remote malicious IRC servers to cause a denial of service (crash) and possibly execute arbitrary code via responses that are not properly fed to the my_strcat function by (1) ctcp_buffer, (2) cannot_join_channel, (3) status_make_printable for Statusbar drawing, (4) create_server_list, and possibly other functions.
Metrics
CVSS 2.0 7.5/10
AV:N/AC:L/Au:N/C:P/I:P/A:PAffected software
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | n/a |
References
- http://marc.info/?l=bugtraq&m=104766521328322&w=2
- http://marc.info/?l=bugtraq&m=104808915402926&w=2
- http://www.debian.org/security/2003/dsa-291Patch, Vendor Advisory
- http://www.debian.org/security/2003/dsa-298
- http://www.securityfocus.com/bid/7098
- http://marc.info/?l=bugtraq&m=104766521328322&w=2
- http://marc.info/?l=bugtraq&m=104808915402926&w=2
- http://www.debian.org/security/2003/dsa-291Patch, Vendor Advisory
- http://www.debian.org/security/2003/dsa-298
- http://www.securityfocus.com/bid/7098
Timeline
- Published
- Jun 9, 2003
- Last modified
- Jun 16, 2026
- NVD status
- Modified