KVIrc DCC Directory Traversal and Multiple Format String Vulnerabilities

Bugtraq ID:	40746
Class:	Input Validation Error
CVE:	CVE-2010-2451 CVE-2010-2452
Remote:	Yes
Local:	No
Published:	May 14 2010 12:00AM
Updated:	Apr 16 2015 05:50PM
Credit:	fabio (CtrlAltCa)
Vulnerable:	SuSE openSUSE 11.3 S.u.S.E. openSUSE 11.2 S.u.S.E. openSUSE 11.1 KVIrc KVirc 3.4.2 KVIrc KVirc 3.4 KVIrc KVirc 3.2.5 KVIrc KVirc 3.2 Gentoo Linux Debian Linux 5.0 sparc Debian Linux 5.0 s/390 Debian Linux 5.0 powerpc Debian Linux 5.0 mipsel Debian Linux 5.0 mips Debian Linux 5.0 m68k Debian Linux 5.0 ia-64 Debian Linux 5.0 ia-32 Debian Linux 5.0 hppa Debian Linux 5.0 armel Debian Linux 5.0 arm Debian Linux 5.0 amd64 Debian Linux 5.0 alpha Debian Linux 5.0
Not Vulnerable:

KVIrc DCC Directory Traversal and Multiple Format String Vulnerabilities

KVIrc is prone to a directory-traversal and multiple remote format-string vulnerabilities because it fails to properly sanitize user-supplied input.

An attacker may exploit these issues to overwrite arbitrary local files or to execute arbitrary code in the context of the vulnerable application. Failed exploit attempts will result in a denial-of-service condition. Other attacks may also be possible, including data loss or corruption.

KVIrc DCC Directory Traversal and Multiple Format String Vulnerabilities

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

KVIrc DCC Directory Traversal and Multiple Format String Vulnerabilities

Solution:
Updates are available. Please see the references for more information.


Debian Linux 5.0 hppa

• Debian kvirc-data_3.4.0-5_all.deb
  http://security.debian.org/pool/updates/main/k/kvirc/kvirc-data_3.4.0- 5_all.deb


• Debian kvirc-dev_3.4.0-5_hppa.deb
  http://security.debian.org/pool/updates/main/k/kvirc/kvirc-dev_3.4.0-5 _hppa.deb


• Debian kvirc_3.4.0-5_hppa.deb
  http://security.debian.org/pool/updates/main/k/kvirc/kvirc_3.4.0-5_hpp a.deb

Debian Linux 5.0 ia-64

• Debian kvirc-data_3.4.0-5_all.deb
  http://security.debian.org/pool/updates/main/k/kvirc/kvirc-data_3.4.0- 5_all.deb


• Debian kvirc-dev_3.4.0-5_ia64.deb
  http://security.debian.org/pool/updates/main/k/kvirc/kvirc-dev_3.4.0-5 _ia64.deb


• Debian kvirc_3.4.0-5_ia64.deb
  http://security.debian.org/pool/updates/main/k/kvirc/kvirc_3.4.0-5_ia6 4.deb

Debian Linux 5.0 m68k

• Debian kvirc-data_3.4.0-5_all.deb
  http://security.debian.org/pool/updates/main/k/kvirc/kvirc-data_3.4.0- 5_all.deb

Debian Linux 5.0 arm

• Debian kvirc-data_3.4.0-5_all.deb
  http://security.debian.org/pool/updates/main/k/kvirc/kvirc-data_3.4.0- 5_all.deb


• Debian kvirc-dev_3.4.0-5_arm.deb
  http://security.debian.org/pool/updates/main/k/kvirc/kvirc-dev_3.4.0-5 _arm.deb


• Debian kvirc_3.4.0-5_arm.deb
  http://security.debian.org/pool/updates/main/k/kvirc/kvirc_3.4.0-5_arm .deb

Debian Linux 5.0 armel

• Debian kvirc-data_3.4.0-5_all.deb
  http://security.debian.org/pool/updates/main/k/kvirc/kvirc-data_3.4.0- 5_all.deb


• Debian kvirc-dev_3.4.0-5_armel.deb
  http://security.debian.org/pool/updates/main/k/kvirc/kvirc-dev_3.4.0-5 _armel.deb


• Debian kvirc_3.4.0-5_armel.deb
  http://security.debian.org/pool/updates/main/k/kvirc/kvirc_3.4.0-5_arm el.deb

Debian Linux 5.0

• Debian kvirc-data_3.4.0-5_all.deb
  http://security.debian.org/pool/updates/main/k/kvirc/kvirc-data_3.4.0- 5_all.deb

Debian Linux 5.0 alpha

• Debian kvirc-data_3.4.0-5_all.deb
  http://security.debian.org/pool/updates/main/k/kvirc/kvirc-data_3.4.0- 5_all.deb


• Debian kvirc-dev_3.4.0-5_alpha.deb
  http://security.debian.org/pool/updates/main/k/kvirc/kvirc-dev_3.4.0-5 _alpha.deb


• Debian kvirc_3.4.0-5_alpha.deb
  http://security.debian.org/pool/updates/main/k/kvirc/kvirc_3.4.0-5_alp ha.deb

Debian Linux 5.0 amd64

• Debian kvirc-data_3.4.0-5_all.deb
  http://security.debian.org/pool/updates/main/k/kvirc/kvirc-data_3.4.0- 5_all.deb


• Debian kvirc-dev_3.4.0-5_amd64.deb
  http://security.debian.org/pool/updates/main/k/kvirc/kvirc-dev_3.4.0-5 _amd64.deb


• Debian kvirc_3.4.0-5_amd64.deb
  http://security.debian.org/pool/updates/main/k/kvirc/kvirc_3.4.0-5_amd 64.deb

Debian Linux 5.0 ia-32

• Debian kvirc-data_3.4.0-5_all.deb
  http://security.debian.org/pool/updates/main/k/kvirc/kvirc-data_3.4.0- 5_all.deb


• Debian kvirc-dev_3.4.0-5_i386.deb
  http://security.debian.org/pool/updates/main/k/kvirc/kvirc-dev_3.4.0-5 _i386.deb


• Debian kvirc_3.4.0-5_i386.deb
  http://security.debian.org/pool/updates/main/k/kvirc/kvirc_3.4.0-5_i38 6.deb

Debian Linux 5.0 mips

• Debian kvirc-data_3.4.0-5_all.deb
  http://security.debian.org/pool/updates/main/k/kvirc/kvirc-data_3.4.0- 5_all.deb


• Debian kvirc-dev_3.4.0-5_mips.deb
  http://security.debian.org/pool/updates/main/k/kvirc/kvirc-dev_3.4.0-5 _mips.deb


• Debian kvirc_3.4.0-5_mips.deb
  http://security.debian.org/pool/updates/main/k/kvirc/kvirc_3.4.0-5_mip s.deb

Debian Linux 5.0 s/390

• Debian kvirc-data_3.4.0-5_all.deb
  http://security.debian.org/pool/updates/main/k/kvirc/kvirc-data_3.4.0- 5_all.deb


• Debian kvirc-dev_3.4.0-5_s390.deb
  http://security.debian.org/pool/updates/main/k/kvirc/kvirc-dev_3.4.0-5 _s390.deb


• Debian kvirc_3.4.0-5_s390.deb
  http://security.debian.org/pool/updates/main/k/kvirc/kvirc_3.4.0-5_s39 0.deb

Debian Linux 5.0 mipsel

• Debian kvirc-data_3.4.0-5_all.deb
  http://security.debian.org/pool/updates/main/k/kvirc/kvirc-data_3.4.0- 5_all.deb


• Debian kvirc-dev_3.4.0-5_mipsel.deb
  http://security.debian.org/pool/updates/main/k/kvirc/kvirc-dev_3.4.0-5 _mipsel.deb


• Debian kvirc_3.4.0-5_mipsel.deb
  http://security.debian.org/pool/updates/main/k/kvirc/kvirc_3.4.0-5_mip sel.deb

Debian Linux 5.0 powerpc

• Debian kvirc-data_3.4.0-5_all.deb
  http://security.debian.org/pool/updates/main/k/kvirc/kvirc-data_3.4.0- 5_all.deb


• Debian kvirc-dev_3.4.0-5_powerpc.deb
  http://security.debian.org/pool/updates/main/k/kvirc/kvirc-dev_3.4.0-5 _powerpc.deb


• Debian kvirc_3.4.0-5_powerpc.deb
  http://security.debian.org/pool/updates/main/k/kvirc/kvirc_3.4.0-5_pow erpc.deb

Debian Linux 5.0 sparc

• Debian kvirc-data_3.4.0-5_all.deb
  http://security.debian.org/pool/updates/main/k/kvirc/kvirc-data_3.4.0- 5_all.deb


• Debian kvirc-dev_3.4.0-5_sparc.deb
  http://security.debian.org/pool/updates/main/k/kvirc/kvirc-dev_3.4.0-5 _sparc.deb


• Debian kvirc_3.4.0-5_sparc.deb
  http://security.debian.org/pool/updates/main/k/kvirc/kvirc_3.4.0-5_spa rc.deb

KVIrc DCC Directory Traversal and Multiple Format String Vulnerabilities

References:

• [KVIrc] Proposal for a stable release of kvirc4 (Fabio)
  
• Changeset 4317 (ctrlaltca)
  
• Changeset 4335 (ctrlaltca)
  
• KVIrc Homepage (KVIrc)