(PVS) Signatures - Tenable Network Security

Description: Synopsis :\n\nThe remote host may give an attacker information useful for future
attacks.\n\nThe remote host is running the mIRC chat client. A vulnerability has been
reported in the mIRC implementation of the DCC protocol. Reportedly, when a DCC
connection is initiated, the command '100 testing' will cause the mIRC server to respond
with the user's current nick. Exploitation of this vulnerability may aid an attack in further
intelligent attacks, or help an attempt at social engineering.
Solution: Upgrade to version 6.1 or higher.
CVE-2002-0425
mIRC < 6.03 Scripting $asctime Overflow
PVS ID: 1863 FAMILY: IRC Clients
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a buffer overflow.\n\nThe remote host is
running the mIRC chat client. A buffer overflow has been reported in the $asctime
identifier, a function in the mIRC scripting language. The error lies in the handling of
oversized format specifier strings. Exploitation relies on a script passing untrusted input
into this function. Reportedly, no such script is included in the default installation of mIRC.
Solution: Upgrade to version 6.03 or higher.
CVE-2002-1456
mIRC DCC Get Dialog File Spoofing Weakness
PVS ID: 1864 FAMILY: IRC Clients
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host may be tricked into running an executable file.\n\nThe
remote host is running the mIRC chat client. It has been reported that it is possible to spoof
file extensions in mIRC's DCC Get dialog. This could be exploited to trick a user into
thinking a malicious file is safe, which may create a false sense of security and cause the
user to open the file.
Solution: Upgrade or patch according to vendor recommendations.
CVE Not available
Trillian IRC PART Message Remote DoS
PVS ID: 1865 FAMILY: IRC Clients
Passive Vulnerability Scanner (PVS) Signatures
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a Denial of Service (DoS) attack.\n\nThe
remote host is running the Trillian IRC client. Reportedly, Trillian is prone to a Denial of
Service attack when it receives messages about a user leaving a non-specified channel or a
channel that the user is not currently in. It is possible to exploit this issue using a malicious
server.
Family Internet Services 474