CVE-2002-1486
Trillian 0.73-0.74 - Buffer Overflow via Malicious IRC Server Responses
Title source: llmExploitation Summary
EIP tracks 5 public exploits for CVE-2002-1486. PoCs published by Lance Fitz-Herbert.
AI-analyzed exploit summary This exploit targets a buffer overflow vulnerability in Trillian (CVE-2002-1486) by sending oversized data blocks (>4095 bytes) or malformed IRC protocol messages to crash the client. It demonstrates DoS via three attack vectors: raw IRC commands, PART messages, and large data payloads.
Description
Multiple buffer overflows in the IRC component of Trillian 0.73 and 0.74 allows remote malicious IRC servers to cause a denial of service and possibly execute arbitrary code via (1) a large response from the server, (2) a JOIN with a long channel name, (3) a long "raw 221" message, (4) a PRIVMSG with a long nickname, or (5) a long response from an IDENT server.
Exploits (5)
This exploit targets a buffer overflow vulnerability in Trillian (CVE-2002-1486) by sending oversized data blocks (>4095 bytes) or malformed IRC protocol messages to crash the client. It demonstrates DoS via three attack vectors: raw IRC commands, PART messages, and large data payloads.
This exploit targets a buffer overflow vulnerability in Trillian versions 0.73 and 0.74 by sending a maliciously crafted IRC raw user mode message (221) with 251 or more bytes of data. The PoC demonstrates a denial-of-service (DoS) attack by crashing the Trillian client.
This exploit targets a buffer overflow vulnerability in Trillian IRC client versions 0.73 and 0.74 by sending a malformed JOIN command. It creates a fake IRC server to trigger the flaw, leading to a denial of service (DoS) condition.
This exploit demonstrates a buffer overflow in Trillian versions .73 and .74 by sending an overly large sender name in a PRIVMSG command, leading to a denial of service. The code sets up a fake IRC server to trigger the vulnerability.
This exploit targets a buffer overflow vulnerability in the Trillian ident server by sending a malformed request of 500 bytes. It causes a denial of service (DoS) by crashing the client and corrupting memory, with potential for arbitrary code execution.