(PVS) Signatures - Tenable Network Security

Description: Synopsis :\n\nThe remote host is vulnerable to a buffer overflow.\n\nThe remote host is
running the Trillian IRC client. Trillian versions 0.73, 0.74 and possibly other versions are
vulnerable to a buffer overflow, caused by improper validation of JOIN commands
received from an IRC server. If a Trillian client connects to an attacker-controlled IRC
server and joins a channel with a name containing more than 206 characters, the attacker
could overflow a buffer and cause the victim's Trillian client to crash or execute code on
the system.
Solution: No solution is known at this time.
CVE-2002-1486
XChat Malformed Nickname Remote Format String
PVS ID: 1873 FAMILY: IRC Clients RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a remote 'format string' flaw.\n\nThe remote
host is running the XChat IRC client. XChat IRC client version 1.2.x is vulnerable to a
format string attack. A remote attacker can create a specially crafted nickname that would
cause arbitrary code to be executed on the system once a connection is established.
Solution: No solution is known at this time.
CVE-2001-0792
XChat /dns Reverse Lookup Response Arbitrary Command Execution
PVS ID: 1874 FAMILY: IRC Clients
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to an flaw which allows attackers to execute
arbitrary commands.\n\nThe remote host is running the XChat IRC client. X-Chat versions
1.8.8 and earlier could allow a remote attacker to execute arbitrary commands on the
X-Chat client. A vulnerability regarding the lack of filtering in the EXECL command could
allow an attacker to send a specially crafted /dns query that would return a malformed
response from the server to execute arbitrary commands on the X-Chat client.
Solution: Upgrade or patch according to vendor recommendations.
CVE-2002-0382
XChat CTCP Ping Arbitrary Remote IRC Command Execution
PVS ID: 1875 FAMILY: IRC Clients
Passive Vulnerability Scanner (PVS) Signatures
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to an flaw which allows attackers to execute
arbitrary commands.\n\nThe remote host is running the XChat IRC client. X-Chat versions
1.4.2 and 1.4.3 could allow a remote attacker to execute IRC commands. A remote attacker
can send a specially crafted CTCP ping request to execute IRC commands on the IRC
server and gain elevated privileges.
Family Internet Services 477