The IRC Protocol component in KVIrc 3.x and 4.x before r4693 does not properly handle \ (backslash) characters, which allows remote authenticated users to execute arbitrary CTCP commands via vectors involving \r and \40 sequences, a different vulnerability than CVE-2010-2451 and CVE-2010-2452.

This update of kvirc does not further allow remote client to send arbitrary CTCP commands. (CVE-2010-2785)

The remote host is affected by the vulnerability described in GLSA-201402-20 (KVIrc: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in KVIrc. Please review       the CVE identifiers referenced below for details.
  Impact :

    A remote attacker could possibly execute arbitrary code with the       privileges of the process, cause a Denial of       Service condition, or overwrite arbitrary files.
  Workaround :

    There is no known workaround at this time.

It was discovered that incorrect parsing of CTCP commands in kvirc, a KDE-based IRC client, could lead to the execution of arbitrary IRC commands against other users.

Fix for security issue: remote command execution https://svn.kvirc.de/kvirc/ticket/858

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Fix for security issue: remote command execution.
https://svn.kvirc.de/kvirc/ticket/858

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
75565	openSUSE Security Update : kvirc (openSUSE-SU-2010:0459-1)	Nessus	SuSE Local Security Checks	medium
72634	GLSA-201402-20 : KVIrc: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	critical
48237	openSUSE Security Update : kvirc (openSUSE-SU-2010:0459-1)	Nessus	SuSE Local Security Checks	medium
48234	openSUSE Security Update : kvirc (openSUSE-SU-2010:0459-1)	Nessus	SuSE Local Security Checks	medium
48221	Debian DSA-2078-1 : kvirc - programming error	Nessus	Debian Local Security Checks	medium
48208	Fedora 12 : kvirc-4.0.0-3.fc12 (2010-11524)	Nessus	Fedora Local Security Checks	medium
48207	Fedora 13 : kvirc-4.0.0-3.fc13 (2010-11506)	Nessus	Fedora Local Security Checks	medium

Detections

Analytics

CVE-2010-2785

high

Tenable Plugins

medium

critical

medium

medium

medium

medium

medium