Ayman Akt IRCIT Invite Message Remote Buffer Overflow Vulnerability

Bugtraq ID:	4998
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	Jun 12 2002 12:00AM
Updated:	Jun 12 2002 12:00AM
Credit:	Published by [email protected].
Vulnerable:	Ayman Akt IRCIT 0.3.1
Not Vulnerable:

Ayman Akt IRCIT Invite Message Remote Buffer Overflow Vulnerability

IRCIT is a terminal based IRC client for Linux and Unix systems.

IRCIT contains a remote buffer overflow vulnerability. When a INVITE message is received, the supplied from user data is copied into a fixed buffer of length MAXHOSTLEN. A maliciously formatted message may overflow this buffer and execute arbitrary code as the IRCIT client.

Ayman Akt IRCIT Invite Message Remote Buffer Overflow Vulnerability

GOBBLES <[email protected]> has provided a proof of concept exploit which will overwrite the EIP register on the target system. It may be used in conjuction with netcat as follows:

$ echo ":x"'!'`./GOBBLES-invite 0xcafebabe`"@x INVITE you :#GOBBLES" | nc - -l -p 6667

• /data/vulnerabilities/exploits/GOBBLES-invite.c

Ayman Akt IRCIT Invite Message Remote Buffer Overflow Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Ayman Akt IRCIT Invite Message Remote Buffer Overflow Vulnerability

References:

• IRCIT Homepage (Ayman Akt)