(PVS) Signatures - Tenable Network Security

Description: Synopsis :\n\nThe remote host is vulnerable to a flaw which allows for the
bypassing of authentication.\n\nThe remote host is running the BitchX IRC
client that may contain a backdoor. BitchX, if downloaded between
12-Apr-2003 and 13-Apr-2003, could cause a backdoor to be installed on the
victim's computer. One of the FTP sites that was linked from the BitchX
website was a false FTP site, and the BitchX IRC Client 1.0 c19 was modified
to include a Trojan Horse. Once the Trojan Horse is executed it attempts to
connect to 207.178.61.5 on port 6667. This could allow a remote attacker to
gain access to systems that have installed the compromised BitchX distributions
and execute commands with the privledges of the user that installed the affected
package.
Solution: Upgrade according to vendor recommendations.
CVE Not available
BitchX IRC Client Channel Mode Change DoS
PVS ID: 1860 FAMILY: IRC Clients
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is running the BitchX IRC client that may contain a Denial
of Service (DoS) vulnerability.\n\n It may be possible to crash the BitchX client when
certain mode changes are made. All version up to 1.0cvs20 are affected.
Solution: Upgrade according to vendor recommendations.
CVE-2003-0334
mIRC < 6.0 Long Nickname Buffer Overflow
PVS ID: 1861 FAMILY: IRC Clients RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is running a version of mIRC that is vulnerable to a buffer
overflow attack.\n\nThis issue is due to improper bounds checking of nicknames sent by
the server. An excessively long nickname (200+) is capable of overwriting the stack. This
issue is also exploitable via a webpage that can instruct the client to launch and to make a
connection to the malicious web server. This may lead to full compromise of the host
running the client software on some Windows systems.
Solution: Upgrade to version 6.0 or higher.
CVE-2002-0231
Passive Vulnerability Scanner (PVS) Signatures
mIRC < 6.1 DCC Server Protocol Nickname Disclosure
PVS ID: 1862 FAMILY: IRC Clients RISK: LOW NESSUS ID:Not Available
Family Internet Services 473