20020920 Yet Another. Trillian 'JOIN' Overflow.mailing list
http://archives.neohapsis.com/archives/bugtraq/2002-09/0258.html CVE-2002-1486
Trillian 0.6351/0.7x - Identd Buffer Overflow
Record summary
CVE-2002-1486 has a selected CVSS score of 7.5; EIP currently links 5 catalogued exploits.
Description
Multiple buffer overflows in the IRC component of Trillian 0.73 and 0.74 allows remote malicious IRC servers to cause a denial of service and possibly execute arbitrary code via (1) a large response from the server, (2) a JOIN with a long channel name, (3) a long "raw 221" message, (4) a PRIVMSG with a long nickname, or (5) a long response from an IDENT server.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 5
Proofs of concept
5Catalogued exploits
ExploitDBTrillian 0.6351/0.7x - Identd Buffer OverflowExploitDB exploitby Lance Fitz-HerbertNot analyzed1 file
ExploitDBTrillian 0.73/0.74 - IRC PRIVMSG Buffer OverflowExploitDB exploitby Lance Fitz-HerbertNot analyzed1 file
ExploitDBTrillian 0.73/0.74 - IRC JOIN Buffer OverflowExploitDB exploitby Lance Fitz-HerbertNot analyzed1 file
ExploitDBTrillian 0.725/0.73/0.74 - IRC User Mode Numeric Remote Buffer OverflowExploitDB exploitby Lance Fitz-HerbertNot analyzed1 file
ExploitDBTrillian 0.74 - IRC Oversized Data Block Buffer OverflowExploitDB exploitby Lance Fitz-HerbertNot analyzed1 file
References
1220020921 And Again. Trillian 'raw 221' Overflow.mailing list
http://archives.neohapsis.com/archives/bugtraq/2002-09/0266.html 20020922 *sigh* Trillian multiple DoSmailing list
http://archives.neohapsis.com/archives/bugtraq/2002-09/0268.html 20020914 Trillian .74 and below, ident flaw.mailing list
http://archives.neohapsis.com/archives/ntbugtraq/2002-q3/0139.html 20020919 Trillian .73 & .74 "PRIVMSG" Overflow.mailing list
http://archives.neohapsis.com/archives/ntbugtraq/2002-q3/0140.html trillian-irc-join-bo(10150)vdb entry
http://www.iss.net/security_center/static/10150.php trillian-raw221-bo(10151)vdb entry
http://www.iss.net/security_center/static/10151.php trillian-irc-server-bo(10163)vdb entry
http://www.iss.net/security_center/static/10163.php 5765vdb entry
http://www.securityfocus.com/bid/5765 5769vdb entry
http://www.securityfocus.com/bid/5769 5777vdb entry
http://www.securityfocus.com/bid/5777 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2002-1486