(PVS) Signatures - Tenable Network Security

Trillian IRC Raw Message DoS
PVS ID: 1869 FAMILY: IRC Clients
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a Denial of Service (DoS) attack.\n\nThe
remote host is running the Trillian IRC client. Trillian version 0.74 and possibly other
versions are vulnerable to a Denial of Service attack, caused by improper validation of IRC
raw messages. By sending one of the following raw requests: 206, 211, 213, 214, 215, 217,
218, 243, 302, 317, 324, 332, 333, 352, or 367, a remote attacker in control of a malicious
IRC server could cause the victim's Trillian client to crash.
Solution: Upgrade or patch according to vendor recommendations.
CVE-2002-1487
Trillian IRC Module Channel Name Format String
PVS ID: 1870 FAMILY: IRC Clients RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a remote 'format string' flaw.\n\nThe remote
host is running the Trillian IRC client. Trillian versions 0.725 and 0.73 are vulnerable to a
format string attack in the IRC module. A remote attacker operating a malicious IRC server
can deceive another user into joining a channel with a specially crafted name where
malicious code can be stored. The malicious code could then be executed on the user's
system, once the user joins the channel.
Solution: No solution is known at this time.
CVE-2002-2155
Trillian IRC Server Response Remote Overflow
PVS ID: 1871 FAMILY: IRC Clients
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a buffer overflow.\n\nThe remote host is
running the Trillian IRC client. Trillian version 0.73 and earlier are vulnerable to a buffer
overflow in the IRC module. By operating a malicious IRC server and sending malformed
responses, a remote attacker can overflow a buffer and execute code on the server.
Solution: No solution is known at this time.
CVE Not available
Trillian IRC JOIN Remote Overflow
PVS ID: 1872 FAMILY: IRC Clients
Passive Vulnerability Scanner (PVS) Signatures
RISK:
MEDIUM
NESSUS ID:Not Available
Family Internet Services 476