#5 Format String Attack

open
nobody
None
5
2006-05-24
2006-05-24
Anonymous
No

When you do a :

/join #%f

The client join the channel
#4567887623452673728937823782937 .... 8908989

or /join #%p
display the adress of the paramter :
#0x9000FFFF

you can also do :
/join #%s%s%s%s
to make a segfault.

Regards,
Romain Le Guen

Discussion

  • jani mikkonen
    jani mikkonen
    2007-05-07

    Logged In: YES
    user_id=228621
    Originator: NO

    semi easy to fix, if you need patches, drop me a note.