Bugtraq mailing list archives

espernet irc services

From: mcclain () STOMPED COM (McClain Looney)
Date: Fri, 24 Jul 1998 19:05:35 -0500


I didn't think anyone cared about irc, but seeing the mIRC posts on this
list, here goes:

Espernet irc services below version 3.3.5 are vulnerable to a bug in the
add/remove code for chanserv which causes a segmentation fault in the
server.  The bug is not widely known or exploited (as far as i can tell),
but innocent users will likely crash any services daemon repeatedly, and at
random, (hey, this command didn't work, lets try it again, and again, and
again...etc).  The bug manifests itself after an ordered series of
add/remove commands to chanserv (i won't get into what they are, but it's
definitely reproducible).

The latest version (3.3.6)of espernet services is at
ftp://ftp.dragonfire.net/software/unix/irc/services

-Citizen_D
irc.stomped.com

Current thread:

Backdoor in ircN, popular mIRC script. Nick Koscianski (Jul 23)
- Re: Backdoor in ircN, popular mIRC script. Benoit Lefebvre (Jul 23)
  - espernet irc services McClain Looney (Jul 24)
  - smal bug in icmpinfo Adrian Dabrowski (Jul 26)
    - Re: smal bug in icmpinfo Rich Lafferty (Jul 26)
- CFINGERD root security hole John Goerzen (Jul 23)
  - Re: CFINGERD root security hole Roscinante (Jul 24)
  - Microsoft Security Bulletin (MS98-006) Aleph One (Jul 24)
  - SECURITY: new ncurses packages twiztah (Jul 24)
  - FW: Microsoft Security Bulletin (MS98-007) MacGyver (Jul 24)
  - Microsoft Security Bulletin (MS98-007) Aleph One (Jul 25)
  - Alert: New Source Bug Affect Sun JWS Aleph One (Jul 25)
  - Annex DoS Albert Nubdy (Jul 25)

(Thread continues...)