OSVDB ID: 66648

Title: KVIrc CTCP Request Failed DCC Handshake Notification Arbitrary Command Injection

Info

Disclosure

Jul 25, 2010

Discovery

Unknown

Dates

Exploit

Unknown

Solution

Jul 25, 2010

Description

Classification

Location: Remote / Network Access
Attack Type: Input Manipulation
Impact: Loss of Integrity
Solution: Patch / RCS
Disclosure: Vendor Verified

Solution

Products

Unknown or Incomplete

References

CVE ID: 2010-2785 (see also: NVD)
Secunia Advisory ID: 40727 40796 40798 40855 41011
Vendor Specific News/Changelog Entry: http://bugs.gentoo.org/show_bug.cgi?id=330111
http://lists.debian.org/debian-security-announce/2010/msg00123.html
http://lists.fedoraproject.org/pipermail/package-announce/2010-July/044625.html
http://lists.fedoraproject.org/pipermail/package-announce/2010-July/044643.html
http://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html
http://lists.opensuse.org/opensuse-security-announce/2010-08/msg00003.html
https://svn.kvirc.de/kvirc/changeset/4693
Mail List Post: http://marc.info/?l=oss-security&m=128041011428629&w=2
Other Advisory URL: http://openwall.com/lists/oss-security/2010/07/28/1
https://svn.kvirc.de/kvirc/ticket/858

Credit

Unknown or Incomplete

Direct URL: http://osvdb.org/66648