Directory traversal vulnerability in the DCC functionality in KVIrc 3.4 and 4.0 allows remote attackers to overwrite arbitrary files via unknown vectors.

The remote host is affected by the vulnerability described in GLSA-201402-20 (KVIrc: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in KVIrc. Please review       the CVE identifiers referenced below for details.
  Impact :

    A remote attacker could possibly execute arbitrary code with the       privileges of the process, cause a Denial of       Service condition, or overwrite arbitrary files.
  Workaround :

    There is no known workaround at this time.

This update of KVirc fixes a remotely exploitable format string and directory traversal vulnerability (CVE-2010-2451, CVE-2010-2452).

Two security vulnerabilities have been discovered :

Multiple format string vulnerabilities in the DCC functionality in KVIrc 3.4 and 4.0 have unspecified impact and remote attack vectors.

Directory traversal vulnerability in the DCC functionality in KVIrc 3.4 and 4.0 allows remote attackers to overwrite arbitrary files via unknown vectors.

KVIrc 4.0.0 Notable new features of this release include: - Definitive and stable port to the Qt4 libraries - Better support for server tecnologies: CAPS, STARTTLS, SASL, irc services... - A new UPnP module to control and remotely map your router ports for DCC - A totally rewritten MDI subsystem, with the look and feel of your OS - A nice graphical addon packager - A visual class editor for object oriented scripting - A rewritten iograph module to check your bandwidth usage - Support for animated avatars - Ability to get other user's avatars/information without the need to CTCP the whole channel - Support for DBus inter-process communication - Support for the MPRIS media player control and info reporting - Support for Phonon direct media playback - A lot of new options to better customize your client
- A lot of new KVS commands and functions for your scripting needs More details here:
http://www.kvirc.net/?id=news&story=2010.06.27.22.30.1.story&dir=lates t

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Two security issues have been discovered in the DCC protocol support code of kvirc, a KDE-based next generation IRC client, which allow the overwriting of local files through directory traversal and the execution of arbitrary code through a format string attack.

ID	Name	Product	Family	Type	Severity
72634	GLSA-201402-20 : KVIrc: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	Local	critical
47604	openSUSE Security Update : kvirc (openSUSE-SU-2010:0354-1)	Nessus	SuSE Local Security Checks	Local	critical
47603	openSUSE Security Update : kvirc (openSUSE-SU-2010:0354-1)	Nessus	SuSE Local Security Checks	Local	critical
47602	openSUSE Security Update : kvirc (openSUSE-SU-2010:0354-1)	Nessus	SuSE Local Security Checks	Local	critical
47567	FreeBSD : kvirc -- multiple vulnerabilities (8685d412-8468-11df-8d45-001d7d9eb79a)	Nessus	FreeBSD Local Security Checks	Local	critical
47565	Fedora 12 : kvirc-4.0.0-1.fc12 (2010-10529)	Nessus	Fedora Local Security Checks	Local	critical
47564	Fedora 13 : kvirc-4.0.0-1.fc13 (2010-10522)	Nessus	Fedora Local Security Checks	Local	critical
47154	Debian DSA-2065-1 : kvirc - several vulnerabilities	Nessus	Debian Local Security Checks	Local	critical

Detections

Analytics

CVE-2010-2452

high

Tenable Plugins

critical

critical

critical

critical

critical

critical

critical

critical