OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
[VulnWatch] xchat 2.0.6 crashes with mirc 6.0-6.11 DCC exploit

From: Stefan Hecker (s.heckerstud.uni-goettingen.de)
Date: Thu Dec 11 2003 - 17:54:08 CST


xchat 2.0.6 crashes with mirc 6.0-6.11 DCC exploit
the machine on which xchat crashed
Linux 2.4.23
xchat 2.0.6

the machine who did the exploit
mirc 6.12
Windows XP

---
what happend:
i starded xchat 2.0.6 on my linux machine and, just for
fun, tried to exploit it via mirc.
if you are not familiar with that: mIRC 6.11 and ealier
6.x crashed on a malformated dcc request. 6.12 fixed that.

oh wonder! xchat closed!!!!
* Quits: <xchat_linux_nick>(whocares) (Client exited)
(msg in my mirc)

downgraded to 2.0.5 and tried again
--- DCC RECV connect attempt to <mynick> failed
(err=Invalid argument).

this was reproduced on a FreeBSD machine with xchat 2.0.6