DoS on irssi 0.8.4

From: Ripe (ripeat_private)
Date: Tue Jun 18 2002 - 21:07:58 PDT

Next message: zeno: "Re: Fixed version of Apache 1.3 available"

Previous message: Oliver Petruzel: "RE: Vulnerability Coordination"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

* DoS on irssi 0.8.4 (current version) *



1. Aplication description:

        Irssi is a modular IRC client for UNIX systems. It runs on text 
mode user interface, or on graphic mode user using GTK+. You can 
donwload irssi (and get more information about it) from official 
website, http://www.irssi.org


2. Problem description:

        The current version 0.8.4 has a little problem, that can crash 
it. A DoS is produced when join to chanel that contains a long topic 
with "\x1b\x5b\x30\x6d\x0d\x0a" at the end, or when youre on a chanel 
and someone change topic to it.


3. Patch:

        Irssi developers has been warned, and 0.8.5 will be released early.

Next message: zeno: "Re: Fixed version of Apache 1.3 available"
Previous message: Oliver Petruzel: "RE: Vulnerability Coordination"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Wed Jun 19 2002 - 13:18:37 PDT