high7.5Public exploit code
CVE-2003-0328
EPIC IRC Client (EPIC4) pre2.002, pre2.003, and possibly later versions, allows remote malicious IRC servers to cause a denial of service (crash) and possibly …
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Epic 1.0.1/1.0.x - CTCP Nickname Server Message Buffer Overrun2003-11-10 · remote · linux · Verified
Impact
EPIC IRC Client (EPIC4) pre2.002, pre2.003, and possibly later versions, allows remote malicious IRC servers to cause a denial of service (crash) and possibly execute arbitrary code via a CTCP request from a large nickname, which causes an incorrect length calculation.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Epic | Epic4 | Versions pre2.002, pre2.003 |
References
- NVD record
- CVE.org record
- http://www.debian.org/security/2003/dsa-306
- http://www.debian.org/security/2003/dsa-399
- http://www.redhat.com/support/errata/RHSA-2003-342.html
- http://www.debian.org/security/2003/dsa-306
- http://www.debian.org/security/2003/dsa-399
- http://www.redhat.com/support/errata/RHSA-2003-342.html