PT-2002-2562 · Irssi · Irssi Irc Client

Published 2002-12-31 · Updated 2008-09-05 · CVE-2002-1840

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions irssi IRC client version 0.8.4

Description The issue concerns a backdoor in the configuration file of the irssi IRC client, which could allow remote attackers to access the system. This backdoor may be present in versions downloaded after 14-March-2002.

Recommendations For irssi IRC client version 0.8.4, consider removing any potentially backdoored configuration files and reconfiguring the client to prevent unauthorized access. As a temporary workaround, restrict access to the system until a clean version of the client can be installed.

Fix

Related Identifiers

CVE-2002-1840

Affected Products

Irssi Irc Client

References · 5

• http://securityfocus.com/bid/4831 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2002-1840 · Security Note
• http://real.irssi.org/?page=backdoor · Vendor Advisory
• http://iss.net/security_center/static/9176.php · Note
• http://online.securityfocus.com/archive/1/274132 · Note