Re: msn messenger

From: Knud Erik Højgaard (knudat_private)
Date: Fri Apr 20 2001 - 01:17:42 PDT

  • Next message: Nicolas Villatte: "strange script in HTML format mail."

    -----Original Message-----
    From: VULN-DEV List [mailto:VULN-DEVat_private]On Behalf Of
    Kayne Ian (Softlab)
    Sent: 19. april 2001 13:54
    To: VULN-DEVat_private
    Subject: Re: msn messenger
    
    
    >When you say
    >do you mean it will disconnect them from IRC or from MSN messenger? If
    it's
    >IRC, there are a bunch of known bugs like this. Eg: load Mirc, connect
    to
    >any server, join a few channels. Then, /join #anychannelwithacomma,init
    
    >and you will be auto-kicked from _every_ you are on. The comma seems to
    have
    >a strange effect. Also, if you 
    
    This is expected behaviour. You're not kicked, you part stating
    something like 'left all channels'. 
    
    
    >/CTCP #channel <controlkey>A  
    
    >(also sometimes works with just "A")
    
    >you can force some users to auto-disconnect from the irc server. There
    are a
    >stack of bugs like these totally excluding DCC holes etc...
    
    This is not a bug in any of the irc clients i tried(mIRC going back to
    ver. 5.41 +bitchx +xchat +ircII) - its more likely a backdoor in a
    widely used script. I remember the Leopard script having the LAGG
    backdoor, meaning any commands send via ctcp preceded by LAGG would be
    executed. Something like '//ctcp # LAGG .msg $me :)' would silently show
    you who was backdoored/running the script, and then they're all yours to
    play with. Very useful for messing with friends/foes. 
    
    >Ian Kayne
    >Technical Specialist - IT Solutions
    >Softlab Ltd - A BMW Company
    
    Med venlig hilsen
    
    Knud Erik Højgaard <knudat_private>
    Cybercity erhvervssupport <supportat_private>
    http://www.cybercity.dk/support 
    Tlf 33 98 30 60
    Do what thou wilt shall be the whole of the Law.
                    -- Aleister Crowley(1875-1947)
    



    This archive was generated by hypermail 2b30 : Fri Apr 20 2001 - 09:12:55 PDT