Re: icq vuln

Subject: Re: icq vuln
From: Rietveld, Marco (marcolofWAM.UMD.EDU)
Date: Sun Jan 16 2000 - 11:07:39 CST

• Next message: Brian Masney: "Re: Secure coding in C (was Re: Administrivia #4883)"
• Previous message: spin0ff: "Re: Secure coding in C (was Re: Administrivia #4883)"
• Next in thread: Al Huger - Mail Account: "Re: icq vuln"
• Reply: Al Huger - Mail Account: "Re: icq vuln"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

|2000-01-14-13:20:27 nascheme:
|> ICQ is a disaster waiting to happen. There is strcat and strcpy
|> all over the place last time I looked at it. I didn't have time
|> to develop and exploit though.

there was a recent post in bugtraq about how there's a buffer-overflow
vulnerability when messaging URL's.. it's explained at
http://www.securityfocus.com/vdb/.. the vulnerabilities database..

marcolof

• Next message: Brian Masney: "Re: Secure coding in C (was Re: Administrivia #4883)"
• Previous message: spin0ff: "Re: Secure coding in C (was Re: Administrivia #4883)"
• Next in thread: Al Huger - Mail Account: "Re: icq vuln"
• Reply: Al Huger - Mail Account: "Re: icq vuln"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b27 : Sun Jan 16 2000 - 11:32:56 CST