Description
CRLF injection vulnerability in the xmms.bx 1.0 script for BitchX allows user-assisted remote attackers to execute arbitrary IRC commands via CRLF sequences in the name of the song in a .mp3 file.
References
- 25281 vdb-entry
- 3036 third-party-advisory
- 37481 vdb-entry
- 20070812 Vulnerability in multiple "now playing" scripts for various IRC clients mailing-list
- 20070812 Vulnerability in multiple "now playing" scripts for various IRC clients mailing-list
- irc-multiple-command-execution(35985) vdb-entry
- 26489 third-party-advisory
- http://wouter.coekaerts.be/site/security/nowplaying