CVE-2003-0328 Integer overflow in n/a
Remote malicious IRC servers can crash the EPIC IRC client or execute arbitrary code via a CTCP request with a large nickname.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2003-0328?
CVE-2003-0328 is a high-severity vulnerability in n/a, published on 22 May 2003. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
EPIC IRC Client (EPIC4) pre2.002, pre2.003, and possibly later versions, allows remote malicious IRC servers to cause a denial of service (crash) and possibly execute arbitrary code via a CTCP request from a large nickname, which causes an incorrect length calculation.
Which versions are affected by CVE-2003-0328?
It affects 1 product.
Products include Epic Epic4.
How do I fix CVE-2003-0328?
Upgrade to a fixed version.
Is CVE-2003-0328 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2003-0328 exists.
Public exploit code: 1 Exploit-DB entry.
Other vulnerabilities in n/a
Sources
Also known as DEBIAN-CVE-2003-0328, DSA-399, GHSA-hvrc-56qp-9hgv.