Description
Format string vulnerability in the error handling of IRC invite responses for Trillian 0.725 and 0.73 allows remote IRC servers to execute arbitrary code via an invite to a channel with format string specifiers in the name.
References
- trillian-irc-format-string(9761) vdb-entry
- 20020801 Two more exploitable holes in the trillian irc module mailing-list
- 5388 vdb-entry