Description
mIRC DCC server protocol allows remote attackers to gain sensitive information such as alternate IRC nicknames via a "100 testing" message in a DCC connection request that cannot be ignored or canceled by the user, which may leak the alternate nickname in a response message.
References
- 20020306 mIRC DCC Server Security Flaw mailing-list
- 5301 vdb-entry
- 4247 vdb-entry
- mirc-dcc-reveal-info(8393) vdb-entry