IRC-Junkie.org - IRC News

KVIrc 3.x and 4.x Remote Command Execution Vulnerability

phrozen77 — Sun, 01 Aug 2010 15:03:19 +0000

All current versions of the KVIrc IRC client contain a remotely exploitable command execution vulnerability, including builds of KVIrc 4 from subversion up to revision 4692 as well as the older 3.x versions.

The bug, triggered by inserting carriage returns (r) into DCC GET commands, can be used to execute every command the IRCd understands in the context of the user running the vulnerable client instance.

To check if your version is exploitable you can either take a look at the “About KVIrc” tab under “Help” and check the revision or execute the following command on IRC:

/echo $version

To make matters worse, whole channels can be exploited at once if they don’t have a mode set that disallows CTCPing them.

A quick workaround is to execute the following command, effectively preventing those “failed” DCC handshakes to be notified and disabling the bug:

/option boolNotifyFailedDccHandshakes 0

To see if you’ve already been exploited you can take a look in your server window and search for lines that look similar to these:

[01:27:46] Processing DCC GET PRIVMSG #kvirc :I’m owned
request from ATTACKER [ATTACKER@HOSTNAME] (DCC GETrPRIVMSG40#kvirc40:I’m40ownedr)
[01:27:46] Unable to process the above request: Unknown DCC type ‘GET PRIVMSG #KVIRC :I’M OWNED ‘, Ignoring and notifying failure

Updated builds of KVIrc are available on their homepage – some distributions also already have updated builds in their repository. If you can’t update because your distribution is not among the one with updated builds, the workaround helps to not fall prey to any possible attackers.

Original report on KVIrc bugtracker
Advisory on Secunia.com

Feel free to Flattr this post at flattr.com, if you like it.

KVIrc 3.x and 4.x Remote Command Execution Vulnerability is a post from: IRC-Junkie.org - IRC News

This post is licensed under the Creative Commons Attribution-NonCommercial-ShareAlike 3.0 Deutschland license.

mIRC 7.1 Final is out

phrozen77 — Sat, 31 Jul 2010 02:35:17 +0000

The “mIRC Unicode project” was successful it seems and Khaled Mardam-Bey just released version 7.1 of his famous IRC client.

The project to convert mIRC to Unicode has taken almost two years of development and testing and has required tens of thousands of changes to 150,000+ lines of source code. This has been the most complex and time-consuming update to mIRC since it was created in 1995, when it started out as a non-Unicode, 16-bit, Windows 3.1 application.

When looking at the changelog, there have been made well over 180 bugfixes and feature enhancements since mIRC 6.35 so it comes as no surprise that according to Khaled “many areas of mIRC have had to be updated or re-written” but should result in it “being faster, more stable, and more compatible with the latest versions of Windows”.

Aside from being converted to Unicode, the client gained a few new features too:

mIRC now supports configuration via UPnP which automatically opens ports for DCC on compatible routers and you may put it into full distraction fullscreen mode with the F11 key, starting from Beta 6.

You can take a look at the history of changes either on our own posting here or in the changelog that is supplied with the client itself which is available from the usual location, here.

Thanks for the tip go to wayne!

Feel free to Flattr this post at flattr.com, if you like it.

mIRC 7.1 Final is out is a post from: IRC-Junkie.org - IRC News

This post is licensed under the Creative Commons Attribution-NonCommercial-ShareAlike 3.0 Deutschland license.

Eggdrop 1.6.20 – now with TCL 8.6 support

phrozen77 — Fri, 30 Jul 2010 12:44:40 +0000

Eggdrop 1.6.20 has been released and marks the first release put together by the new developer team.

Eggdrop is a mature IRC bot that has been in development since 1993 and this new release once again brings new features, lots of bugfixes and enhancements.

For starters, Eggdrop can now be compiled against TCL 8.6 and amongst “numerous minor issues and potential crashes fixed” there also have been issues with the 64-bit binaries crashing on FreeBSD and NetBSD resolved.

Interesting new features include full CIDR support for userhosts and modes b, e and l. Channel sync time has been improved by querying aforementioned modes at once and removing “redundant commands”. The charset detection on Telnet and DCC partylines now works better and according to developer thommey you should “never have to use .fixcodes” again.

The TCL event loop has been replaced and now allows events to be triggered without a delay – previous versions had a minimum delay of one second between TCL events, no matter how low the timer has been set.

Security issues resolved since 1.6.19+ctcpfix are proper checking of the .+chan command which could have changed the need-* channel settings in the past.

If you’re running 1.6.20rc2 you can keep using it as there where no changes between it and the final release, others might want to update: The updated sourcecode can be grabbed from their homepage, the full changelog is supplied in docs/Changes1.6 and a summary of the most important changes is available here.

Feel free to Flattr this post at flattr.com, if you like it.

Eggdrop 1.6.20 – now with TCL 8.6 support is a post from: IRC-Junkie.org - IRC News

This post is licensed under the Creative Commons Attribution-NonCommercial-ShareAlike 3.0 Deutschland license.

Smuxi 0.7.2.1 is out, extends CTCP support & adds ignore filters

phrozen77 — Sun, 25 Jul 2010 13:18:24 +0000

Smuxi, the “Smart MUltipleXed” IRC client was updated to version 0.7.2.1 on Friday.

The new version contains 13 new features, fixes 29 bugs and is now available in 4 new languages – Portuguese, Danish, Finnish and Catalan, of which the latter two are currently only partially translated. Six already existing translations have been updated and project lead meebey asks interested parties to contribute and further improve them.

Interesting new features include the freshly added linemarker which inserts a red line where you last looked into the channel, a private message window or the Twitter tab – see the below screenshot:

Smuxi 0.7.2 Main Window on Linux

Even more interesting is the new filter capability this release introduces: You now can ignore events and messages using both regular expressions as well as wildcards, giving you quite a bit of flexibility on which events you’d like to dismiss.

Smuxi 0.7.2 Filter Preferences on Linux

The titlebar of the client has gotten some work too and now shows activewindowname @ network – programname which is useful if you want to see at a glance where the text you’re typing is going to – who didn’t post or paste something into the totally wrong window at the most inappropiate time yet?

CTCP support has been expanded too and the client now replies to CTCP TIME, CTCP FINGER and CTCP USERINFO. Probably of more practical use is the new logging function – currently Smuxi can log to file and uses a logformat that is almost similar to the one of irssi – besides the timestamp which prepended to entries in full.

For the future, more logging backends are planned and may include “SQLite, MySQL, PostgreSQL and such” says developer meebey. Also on the roadmap for a 0.8 release is a plugin architecture but it “remains to be seen” which features this will support.

The complete list of changes, additions and fixes can be found in the 0.7.2 roadmap and if you got curious you can grab the download for Windows and Linux from here.

Thanks for the tip and the pictures go to meebey himself!

Feel free to Flattr this post at flattr.com, if you like it.

Smuxi 0.7.2.1 is out, extends CTCP support & adds ignore filters is a post from: IRC-Junkie.org - IRC News

This post is licensed under the Creative Commons Attribution-NonCommercial-ShareAlike 3.0 Deutschland license.

IRC Statistics Software Comparison

phrozen77 — Wed, 14 Jul 2010 16:11:49 +0000

Today we shall have a look at the various possibilities available for statistics of activity on IRC, should you decide you want to have some pretty graphs detailing the happenings in a channel or on a whole network.

Most programs presented in this article parse logfiles generated by a variety of IRC clients, with the exception of phpDenora/Denora which needs to be run as a network service to gather its stats. However, both solutions can supplement one another as one may gather and display information that the other does or even can not.

All screenshots show results generated from the same logfile so you can directly compare the output of each software – only the output of phpDenora is taken from a live network and does not represent the numbers shown in the other screenshots. Also, it should be noted that all programs have been tested in their default configuration and most provide a host of options that may output even more detailed and fancier statistics so YMMV.

mIRCStats

Language: Pascal
License: Shareware (Full Version starting from 12$/€)
Type: Log-parser
Logformats: irssi, mIRC, Trillian, Eggdrop, irssi, HydraIRC, ircle, BNC, miau, Winbot, XChat
Output: HTML
Support: Forum

mIRCStats IRC Statistics

mIRCStats is one of the older and more well-known packages out there but also the only one in this comparison that is licensed as shareware. However, with paying you get access to even more advanced output and graphing options and put food on the developers table

The statistics it outputs leave nothing to be desired, not even in the shareware version. mIRCStats supports a wide variety of IRC clients it can parse logs from and adding new parsers is trivial – just edit a textfile that defines how certain events “look” in the log. There even is an option to automatically upload the generated files via FTP to a server of your choice so the statistics will always be up-to-date.

One downside of mIRCStats is that it is a Windows-only program which means you’ll need an always-on Windows machine that will parse the log and generate the stats if you plan on periodic updates of your stats.

pisg (Perl IRC Statistics Generator)

Language: Perl
License: GPL
Type: Log-parser
Logformats: XChat, mIRC, Eggdrop, BitchX, irssi, virc98, dancer, Trillian, Grufti, mbot, Winbot, zcbot, muh, Energymech, ircII, psyBNC, ircle, infobot, axur, bobot++, oer, perlbot, Vision, pircbot, KVIrc, HydraIRC, sirc, moobot, supybot, blootbot, dircproxy, Konversation
Output: HTML
Support: #pisg

pisg IRC Statistics

pisg also is a logfile parser and, as the acronym suggests, is written in Perl which makes it multiplatform / multiOS.

The statistics it generates in its default configuration are detailed but beyond that pisg is very extendable and provides many options to further customize the output and statistics parsed and graphed by it – the documentation explains most if not all possible settings in detail. If you are using a client whose logformat is not in its extensive list of supported and supplied parsers you can create your own provided you have some knowledge of regular expressions.

With pisg, the parsing of logfiles can be automated by adding the command to cron or Task Scheduler and if you want to generate statistics for multiple channels you can easily do so by configuring it via its config-file instead of passing commandline arguments to the executable.

risg (Ruby IRC Statistics Generator)

Language: Ruby
License: MIT
Type: Log-parser
Logformats: irssi
Output: HTML, XML, Console
Support: #risg

risg IRC Statistics

risg, short for “Ruby IRC Statistics Generator”, also is a multiplatform / multiOS logfile parsing statistics generator programmed in Ruby.

Currently it only parses logfiles that are in irssis’ default format however parser-support is modular and one could create his own parser based on the supplied one for irssi.

Statistics graphed by risg are a bit plain and not as detailed as they could be, but given the low version number and the fact that the software still is considered to be in an “experimental stage of development” things might as well change in the future. The lack of documentation besides a basic setup and usage guide is probably also attributable to the early stage the software is in but all in all risg has potential.

Being a commandline-driven program, risgs’ statistics generation can be automated and its output can be modified, used and mangled limited only by its users imagination.

superseriousstats

Language: PHP
License: BSD
Type: Log-parser
Logformats: Eggdrop, irssi, mIRC
Output: HTML, MySQL
Support: #sss-support

SuperSeriousStats IRC Statistics

superseriousstats is of the “logfile parsing” variety too but, to add another programming language to the mix, is written entirely in PHP. It uses a MySQL database for data storage which opens up quite a few possibilities on how and where you can use it besides the full statistics website.

The graphs and statistics sss generates aren’t overly fancy (did you expect anything else from software that calls itself “serious”?) but some customization options are provided so you can still tweak and fiddle with them. As with the previous packages, superseriousstats is to be used from the commandline and can be executed with any scheduling daemon – provided you have a recent version of PHP installed on the platform of your choice.

Extending the number of logformats / clients supported is just a matter of creating an appropiate parser for which you’d need to have at least a basic understanding of regular expressions.

Denora / phpDenora

Language: C / PHP
License: GPL
Type: Network Service
Logformats: -
Output: HTML, XML, MySQL
Support: #denora

phpDenora IRC Statistics

The combination of Denora and phpDenora is unique in that it is the only package in this comparison that must be run as a network service to gather its statistics.

The upside of this is that it can gather statistics and details the other packages can’t provide but on the flipside also means that you will need to have access to the IRC networks configuration or convince one of the admins to install it for you – otherwise you’re out of luck.

The statistics and graphs phpDenora displays are multifaceted & good-looking and due it being a network service it displays statistics for the whole network, not just one or a few channels. Denora introduces StatServ, a pseudoclient like NickServ, to the network that is able to display a selection of statistics in channel messages or notices to you.

Data parsed by Denora is available in a MySQL database or XML which makes it an ideal candidate for modeling the output your way. It should be noted that the successor for phpDenora, called MagIRC, is already in the works but is not anywhere near production-ready and therefore not suitable for most IRC nets.

Verdict:

All solutions generate useful and appealing results – one maybe a bit more than the other but in the end it’s all a matter of taste and largely depends on what you want to achieve.

If you’re looking to customize the output or scope of the graphs you should definately pick the solution that is written in the language you’re already familiar with or comfortable to learn.

What do you use to provide statistics on your network or channel?

Feel free to Flattr this post at flattr.com, if you like it.

IRC Statistics Software Comparison is a post from: IRC-Junkie.org - IRC News

This post is licensed under the Creative Commons Attribution-NonCommercial-ShareAlike 3.0 Deutschland license.