mIRC Home    About    Download    Register    News    Help

Print Thread
Module for UnrealIRCd to stop the DCC exploit #54302 13/10/03 07:52 PM
Joined: Dec 2002
Posts: 2,809
C
codemastr Offline OP
Hoopy frood
OP Offline
Hoopy frood
C
Joined: Dec 2002
Posts: 2,809
Yeah this is off topic, but I know there are a lot of IRC server admins on here, so I think this will help stop the spread of this exploit. Syzop has written a little module that will detect the bad DCC send and block it from ever reaching the user. I strongly recommend that if you run UnrealIRCd you install this module to protect your users!

(Sorry if anyone considers this to be spamming, I'm just trying to help stop this exploit from doing more damage than it has already done).

You can get the module at http://www.vulnscan.org/UnrealIrcd/modules/AntiDCCBug-latest.tar.gz

Re: Module for UnrealIRCd to stop the DCC exploit #54303 13/10/03 08:02 PM
Joined: Jun 2003
Posts: 242
R
r0ck0 Offline
Fjord artisan
Offline
Fjord artisan
R
Joined: Jun 2003
Posts: 242
So far, every post that I've read on this subject says that it's just 6.1x that's effected. I tried this exploit on a friend who is running 6.03 and it worked.

Re: Module for UnrealIRCd to stop the DCC exploit #54304 13/10/03 08:26 PM
Joined: Jun 2003
Posts: 5,024
M
Mentality Offline
Hoopy frood
Offline
Hoopy frood
M
Joined: Jun 2003
Posts: 5,024
As you can see at http://www.irchelp.org/irchelp/mirc/exploit.html the exploit affects all versions of mIRC from 6.0 to 6.11.

Regards,


Mentality/Chris
Re: Module for UnrealIRCd to stop the DCC exploit #54305 14/10/03 12:38 PM
Joined: Jan 2003
Posts: 6
M
Muun Offline
Nutrimatic drinks dispenser
Offline
Nutrimatic drinks dispenser
M
Joined: Jan 2003
Posts: 6
Someone tried this exploit on a channel with me and about 15 people "died", but I (using mIRC 6.1 at that point, 6.12 now) was completely unaffected. Perhaps it was thanks to some scripts I was running...

Re: Module for UnrealIRCd to stop the DCC exploit #54306 15/10/03 09:32 AM
Joined: Oct 2003
Posts: 1
B
blotter45 Offline
Mostly harmless
Offline
Mostly harmless
B
Joined: Oct 2003
Posts: 1
this module is great!! thank you to syzop for making it!

I was wondering though, would it be difficult to change it so instead of sending out a local server notice to eyes users, it would instead send out a globops so opers on the whole network could see when a server blocks an exploit attempt?

Re: Module for UnrealIRCd to stop the DCC exploit #54307 16/10/03 02:55 AM
Joined: Oct 2003
Posts: 1
S
Soulful Offline
Mostly harmless
Offline
Mostly harmless
S
Joined: Oct 2003
Posts: 1
i only wish that you all would at least let me know what the exploit attempts to do, even if vaguely. Additionally, can someone add some code to auto ban someone that uses the dcc exploit, as well as identify them?