full-disclosure - xchat 2.0.6 crashes with mirc 6.0-6.11 DCC exploit

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <37117.10.10.16.93.1071186656.squirrel@webmail.stud.uni-goettingen.de>
From: s.hecker at stud.uni-goettingen.de (Stefan Hecker)
Subject: xchat 2.0.6 crashes with mirc 6.0-6.11 DCC exploit

xchat 2.0.6 crashes with mirc 6.0-6.11 DCC exploit
the machine on which xchat crashed
Linux 2.4.23
xchat 2.0.6

the machine who did the exploit
mirc 6.12
Windows XP

---
what happend:
i starded xchat 2.0.6 on my linux machine and, just for
fun, tried to exploit it via mirc.
if you are not familiar with that: mIRC 6.11 and ealier
6.x crashed on a malformated dcc request. 6.12 fixed that.

oh wonder! xchat closed!!!!
* Quits: <xchat_linux_nick>(who@...es) (Client exited)
(msg in my mirc)

downgraded to 2.0.5 and tried again
--- DCC RECV connect attempt to <mynick> failed
(err=Invalid argument).

this was reproduced on a FreeBSD machine with xchat 2.0.6