IRC Services Memo Viewing Information Disclosure Vulnerability
BID:4213
Info
IRC Services Memo Viewing Information Disclosure Vulnerability
| Bugtraq ID: | 4213 |
| Class: | Design Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Feb 27 2002 12:00AM |
| Updated: | Feb 27 2002 12:00AM |
| Credit: | Published in the IRC Services changelog. |
| Vulnerable: |
IRC Services IRC Services 4.5.38 |
| Not Vulnerable: |
IRC Services IRC Services 4.5.39 |
Discussion
IRC Services Memo Viewing Information Disclosure Vulnerability
IRC Services is a package of services for an IRC network. Functionality is included to register nicks and channels, centralize network control, and send memos to offline users. IRC Services is written for Linux and BSD based systems.
A vulnerability has been reported in some versions of IRC Services. It may be possible for an attacker to determine when an arbitrary user has read a memo. This information disclosure may aid the attacker in, for example, a social engineering attack.
IRC Services is a package of services for an IRC network. Functionality is included to register nicks and channels, centralize network control, and send memos to offline users. IRC Services is written for Linux and BSD based systems.
A vulnerability has been reported in some versions of IRC Services. It may be possible for an attacker to determine when an arbitrary user has read a memo. This information disclosure may aid the attacker in, for example, a social engineering attack.
Exploit / POC
IRC Services Memo Viewing Information Disclosure Vulnerability
Currently the SecurityFocus staff are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Currently the SecurityFocus staff are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution / Fix
IRC Services Memo Viewing Information Disclosure Vulnerability
Solution:
An updated version is available:
IRC Services IRC Services 4.5.38
Solution:
An updated version is available:
IRC Services IRC Services 4.5.38
-
IRC Services ircservices-4.5.39.tar.gz
http://freshmeat.net/redir/ircservices/9424/url_tgz/ircservices-4.5.39 .tar.gz
References
IRC Services Memo Viewing Information Disclosure Vulnerability
References:
References:
- IRC Services Homepage (IRC Services)