PT-2003-1532 · Epic4 · Epic Irc Client

Published 2003-05-22 · Updated 2008-09-05 · CVE-2003-0328

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: EPIC IRC Client (EPIC4) versions pre2.002 through pre2.003

Description: The issue allows remote malicious IRC servers to cause a denial of service (crash) and possibly execute arbitrary code via a CTCP request from a large nickname. This occurs due to an incorrect length calculation.

Recommendations: For EPIC IRC Client (EPIC4) versions pre2.002 through pre2.003, consider disabling CTCP requests from unknown or untrusted sources until a patch is available. Restrict access to the IRC client to minimize the risk of exploitation.

Exploit

Fix

Related Identifiers

CVE-2003-0328

DSA-306

DSA-399

Affected Products

Epic Irc Client

References · 9

• 🔥 https://exploit-db.com/exploits/23366 · Exploit
• ftp://ftp.prbh.org/pub/epic/patches/alloca_underrun-patch-1 · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2003-342.html · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2003-0328 · Vendor Advisory
• http://debian.org/security/2003/dsa-306 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2003-0328 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2003-0328 · Vendor Advisory
• http://debian.org/security/2003/dsa-399 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2003-0328 · Security Note