CVE-1999-1351 Information

Description

Directory traversal vulnerability in KVIrc IRC client 0.9.0 with the \Listen to !nick soundname requests\ option enabled allows remote attackers to read arbitrary files via a .. (dot dot) in a DCC GET request.

Reference

http://marc.info/?l=bugtraq&m=93845560631314&w=2 http://www.iss.net/security_center/static/7761.php

Share on: