Buffer overflow in Netscape 6 and Mozilla 1.0 RC1 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long channel name in an IRC URI.

The remote host is using the Netscape web browser, which contains a built-in IRC client. There is a flaw in this version that may allow an attacker to execute arbitrary code on this host, provided the user uses it to go on IRC.

The remote host is using the Mozilla web browser, which contains a built-in IRC client. There is a flaw in this version that may allow an attacker to execute arbitrary code on this host, provided the user uses it to go on IRC.

The remote host is running a version of the Mozilla browser that is vulnerable to a buffer overflow. Specifically the browser will crash when handling an exceptionally long request (32kb+) for a channel. The vulnerability may be used to crash the browser and/or allow the execution of arbitrary code on the client host. 

Updated Mozilla packages are now available for Red Hat Linux Advanced Server. These new packages fix vulnerabilities in previous versions of Mozilla.

Mozilla is an open source Web browser. Versions of Mozilla prior to version 1.0.1 contain various security vulnerabilities. These vulnerabilities could be used by an attacker to read data off of the local hard drive, to gain information that should normally be kept private, and in some cases to execute arbitrary code. For more information on the specific vulnerabilities fixed please see the references below.

All users of Mozilla should update to these errata packages containing Mozilla version 1.0.1 which is not vulnerable to these issues.

ID	Name	Product	Family	Severity
1752	Netscape < 6.2.3 IRC Client Buffer Overflow (deprecated)	Nessus Network Monitor	Web Clients	medium
1751	Mozilla < 1.0rc2 IRC Client Buffer Overflow (deprecated)	Nessus Network Monitor	Web Clients	medium
1327	Netscape/Mozilla/Galeon Long IRC Channel Name Overflow (deprecated)	Nessus Network Monitor	SMTP Clients	critical
12361	RHEL 2.1 : mozilla (RHSA-2003:046)	Nessus	Red Hat Local Security Checks	high
801377	Mozilla < 1.0rc2 IRC Client Buffer Overflow	Log Correlation Engine	Web Clients	medium

Detections

Analytics

CVE-2002-0593

critical

Tenable Plugins

medium

medium

critical

high

medium