QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2002-1486

Back to search

CVE-2002-1486

Published: Mar 18, 2003

Modified: Aug 8, 2024

PUBLISHED

Description

Multiple buffer overflows in the IRC component of Trillian 0.73 and 0.74 allows remote malicious IRC servers to cause a denial of service and possibly execute arbitrary code via (1) a large response from the server, (2) a JOIN with a long channel name, (3) a long "raw 221" message, (4) a PRIVMSG with a long nickname, or (5) a long response from an IDENT server.

VendorProductVersions

n/a

n/a

affected
n/a

References

5777
vdb-entry
x_refsource_BID
5769
vdb-entry
x_refsource_BID
5765
vdb-entry
x_refsource_BID
trillian-raw221-bo(10151)
vdb-entry
x_refsource_XF
20020922 *sigh* Trillian multiple DoS
mailing-list
x_refsource_BUGTRAQ
trillian-irc-server-bo(10163)
vdb-entry
x_refsource_XF
20020914 Trillian .74 and below, ident flaw.
mailing-list
x_refsource_NTBUGTRAQ
20020919 Trillian .73 & .74 "PRIVMSG" Overflow.
mailing-list
x_refsource_NTBUGTRAQ
trillian-irc-join-bo(10150)
vdb-entry
x_refsource_XF

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now