IRSSI Trojaned Configure File Arbitrary Access Vulnerability
BID:4831
Info
IRSSI Trojaned Configure File Arbitrary Access Vulnerability
| Bugtraq ID: | 4831 |
| Class: | Access Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | May 25 2002 12:00AM |
| Updated: | May 25 2002 12:00AM |
| Credit: | Vulnerability announced by irssi project. |
| Vulnerable: |
irssi irssi 0.8.4 |
| Not Vulnerable: | |
Discussion
IRSSI Trojaned Configure File Arbitrary Access Vulnerability
irssi is a freely available, open source irc client. irssi is available for the Linux and Unix operating systems.
The server hosting irssi was compromised at some point. After being compromised, the source code to irssi was altered to include a backdoor. This backdoor allowed a user from the IP address 204.120.36.206 to remotely execute commands on the host that irssi was installed on. The source code is known to have been trojaned between the beginning of April, and end of May. Downloads of the source during this time likely contain the trojan code.
irssi is a freely available, open source irc client. irssi is available for the Linux and Unix operating systems.
The server hosting irssi was compromised at some point. After being compromised, the source code to irssi was altered to include a backdoor. This backdoor allowed a user from the IP address 204.120.36.206 to remotely execute commands on the host that irssi was installed on. The source code is known to have been trojaned between the beginning of April, and end of May. Downloads of the source during this time likely contain the trojan code.
Solution / Fix
IRSSI Trojaned Configure File Arbitrary Access Vulnerability
Solution:
Backdoored source code may be identified by grepping the configure file for the string "SOCK_STREAM".
Binary downloads of the client have been reported by the irssi project as being unaffected.
A fixed version of the software is available:
irssi irssi 0.8.4
Solution:
Backdoored source code may be identified by grepping the configure file for the string "SOCK_STREAM".
Binary downloads of the client have been reported by the irssi project as being unaffected.
A fixed version of the software is available:
irssi irssi 0.8.4
-
irssi irssi-0.8.4a.tar.gz
http://real.irssi.org/files/irssi-0.8.4a.tar.gz