Vulnerability Development mailing list archives

Re: BitchX /ignore bug

From: nohican () MARCELLA NIETS ORG (nohican () MARCELLA NIETS ORG)
Date: Wed, 5 Jul 2000 15:05:43 +0200


This is *real* bug and you *should* patch asap, it is failry easily
possible to disconnect people (eg: sigsev their BitchX). It should
be possible (thought tricky) to execute remote commands. (Once again
a reason why you should not irc as root).

I have the slight suspicion this isn't the only issue in BitchX.

Kind Regards,
Joost Pol aka Nohican
Root66

- Do not underestimate the power of stupid people in large groups.

If I read this correctly, this is not an attack perse, but a self
annihilation is it not?  and while a bug, not something one can use to
take others ofline or server, please correct me if I read this wrong.

Thanks,

Ron DuFresne

Current thread:

Re: default passwords...partII, (continued)
- - - Re: default passwords...partII Daniel SALAGEAN (Jul 04)
    - Re: default passwords...partII Joe Jenkins (Jul 05)
    - Re: default passwords...partII Daniel SALAGEAN (Jul 05)
    - Re: default passwords...partII CouNT (Jul 06)
    - Re: default passwords...partII Max Vision (Jul 04)
    - Formatting bugs (was BitchX /ignore bug) Kotz (Jul 04)
    - Re: Maximum Linux Security (d/l) Renato Murilo Langona (Jul 04)
    - BitchX /ignore bug Rick Jansen (Jul 04)
    - Re: BitchX /ignore bug Blue Boar (Jul 04)
    - Re: BitchX /ignore bug Ron DuFresne (Jul 05)
    - Re: BitchX /ignore bug nohican () MARCELLA NIETS ORG (Jul 05)
    - Re: BitchX /ignore bug Steve Mosher (Jul 05)
    - Re: BitchX /ignore bug Ryan Yagatich (Jul 05)
    - Re: BitchX /ignore bug Firstname Lastname (Jul 04)
    - Re: Maximum Linux Security (d/l) rompa (Jul 10)
    - Re: Default passwords er (Jul 04)
    - Re: Default passwords Ex Machina (Jul 05)
    - Re: Default passwords Rodrigo Barbosa (Jul 05)
    - Re: Default passwords M J (Jul 05)
    - (no subject) The Incubus (Jul 05)
    - (no subject) Chris A. Mattingly (Jul 05)

(Thread continues...)