Re: recent mIRC vulnerability

From: Jack Flaherty (Shockroat_private)
Date: Tue Apr 24 2001 - 22:41:07 PDT

  • Next message: Balazs Scheidler: "possible apache logging problem"

    In a message dated 4/23/2001 5:05:58 PM Central Daylight Time,
    bill_weissat_private writes:
    
    
    > Can anyone help me out?
    
    ctcp 1:*:?:$1-
    
    let's just say that dumping the above line in the remotes section of your ini
    file wouldn't be a good thing....
    
    The idea is that mIRC is generally secure (sure, the occasional oddball DoS
    that's quickly patched sometimes shows its ugly head, but what software
    doesn't have those?).  Poorly written scripts or maliciously written scripts
    are the problem.
    
    Securing your mIRC is basically a matter of feretting through your script
    with an understanding of exactly what it does (to make absolutely sure that
    there are no backdoors or nasty lines of code.)
    
    I wouldn't run a third-party mIRC script anyway.  It's more fun to write your
    own.
    
    ampster
    



    This archive was generated by hypermail 2b30 : Wed Apr 25 2001 - 11:19:01 PDT