full-disclosure - Re: ICQ 6 protocol bug?

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date: Sat, 14 Feb 2009 23:26:48 +0200
From: James Matthews <nytrokiss@...il.com>
To: full-disclosure@...ts.grok.org.uk
Subject: Re: ICQ 6 protocol bug?

ICQ is known to have a few remote bugs. I use meebo.com instead of a client
due to these issues.

On Fri, Feb 13, 2009 at 5:57 PM, Leon Juranic <leon.juranic@...igo.hr>wrote:

>
> Hi,
>
> It could be quite possible, although, I can't confirm it. But, after
> analysis of recent ICQ6 vulnerability, I'm under impression that there are
> more similar vulnerabilities in it.
>
> ICQ6 vulnerability:
> http://www.infigo.hr/hr/in_focus/advisories/INFIGO-2008-04-08
>
>
> Regards,
> Leon Juranic
>
> -----Original Message-----
> From: full-disclosure-bounces@...ts.grok.org.uk
> [mailto:full-disclosure-bounces@...ts.grok.org.uk] On Behalf Of Darren
> Reed
> Sent: Friday, February 13, 2009 10:01 AM
> To: full-disclosure@...ts.grok.org.uk
> Subject: [Full-disclosure] ICQ 6 protocol bug?
>
> For some time now I've seen ICQ receive messages, from unknown people,
> occassionally make the client "core dump'. The messages are often
> gibberish - more like the ASCII characters from someone trying to make
> it execute something it shouldn't.
>
> My interpretation of this is unknown parties are trying to exploit a bug
> in ICQ6 (it may work on Win2k or Win98...) but I might be wrong. I need
> to fire up wireshark to see what actually get sent.
>
> Has anyone else seen this?
> Or have details on what the hack is?
>
> Google found some hits for "old bugs", older than ICQ6....
>
> Darren
> --
>  Darren Reed
>  darrenr@...d.wattle.id.au
>
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> Hosted and sponsored by Secunia - http://secunia.com/
>
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> Hosted and sponsored by Secunia - http://secunia.com/
>



-- 
http://www.astorandblack.com

Content of type "text/html" skipped

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/