~ubuntu-branches/ubuntu/lucid/kvirc/lucid-security

Viewing all changes in revision 10.

  • Committer: Bazaar Package Importer
  • Author(s): Nathan Handler
  • Date: 2011-03-12 20:00:18 UTC
  • Revision ID: james.westby@ubuntu.com-20110312200018-o52wsh3pna2ymaaa
Tags: 4:4.0.0~svn3900+rc2-1ubuntu0.2
* SECURITY UPDATE: The IRC Protocol component in KVIrc 3.x and 4.x before 
  r4693 does not properly handle \ (backslash) characters, which allows
  remote authenticated users to execute arbitrary CTCP commands via vectors
  involving \r and \40 sequences, a different vulnerability than CVE-2010-2451
  and CVE-2010-2452.
  - 33_upstream_security_#858.patch
    - Patch based on upstream SVN revision 4693.
  - CVE-2010-2785:
    - http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=2010-2785
  - LP: #612682

expand all expand all

Show diffs side-by-side

added added

removed removed

Lines of Context: