Re: DCC HiJacking patch for BitchX 75p1

[davem+ () ANDREW CMU EDU (David Jay Meltzer)]

> Hi all,
>    as recently discovered, with a simple port scan you can hijack some
> of the BitchX dcc connections. This due to the port assigning on the
> requesting client.

Recently?  These issues were published as "IRC DCC Protocol Security Holes"
from FEH Staff in "FEH Issue #4" released 12/26/95.

-Dave

-------------------------------------
          David J. Meltzer
           davem+ () cmu edu
     Carnegie Mellon University
-------------------------------------