egghelp/eggheads community

supposed 1.6.x eggdrop exploit posted on bugtraq

2004-04-16T10:49:34-04:00

]Kami[ ?WTF is wrong with u kiddie?

Statistics: Posted by Guest — Fri Apr 16, 2004 10:49 am

supposed 1.6.x eggdrop exploit posted on bugtraq

2004-04-15T01:41:01-04:00

They have passes..but attacker can still hack in one egg and op itself on channels...

Stop doing [censored] to others, and nobody will hack your bots...Be good little boy and stop taking channel and then others won't revenge to you.

Haha, ppl read this

Statistics: Posted by ]Kami[ — Thu Apr 15, 2004 1:41 am

supposed 1.6.x eggdrop exploit posted on bugtraq

2004-04-14T17:32:51-04:00

They have passes..but attacker can still hack in one egg and op itself on channels...

Statistics: Posted by Guest — Wed Apr 14, 2004 5:32 pm

supposed 1.6.x eggdrop exploit posted on bugtraq

2004-04-07T09:38:24-04:00

Does anybody know how to patch windrop 1.6.15 from this vulnerability?

Just make sure every bot has a pass, and you'll be fine.

Statistics: Posted by dollar — Wed Apr 07, 2004 9:38 am

supposed 1.6.x eggdrop exploit posted on bugtraq

2004-04-07T08:12:44-04:00

Does anybody know how to patch windrop 1.6.15 from this vulnerability?

Statistics: Posted by Guest — Wed Apr 07, 2004 8:12 am

supposed 1.6.x eggdrop exploit posted on bugtraq

2004-04-01T17:45:09-04:00

I really hope that eggdrop and windrop 1.6.16 will be reelased soon, becource this exploit is a serius problem...i have experienced some attacks on my botnet myself...

Statistics: Posted by Guest — Thu Apr 01, 2004 5:45 pm

eggdrop 1.6.13 patch

2004-02-17T17:31:33-04:00

if those two {} fix the vulnerability, here is the patch for 1.6.13

http://www.lownoise.org/downloads/eggdr ... tion.patch

patch -p0 < eggdrop1.6.13+p1_ReAction.patch from outside eggdrop1.6.13 directory.

have fun

ReAction

Statistics: Posted by Guest — Tue Feb 17, 2004 5:31 pm

supposed 1.6.x eggdrop exploit posted on bugtraq

2004-02-15T20:20:35-04:00

Yeah saw about bug, strange that nobody discovered it so long...

Statistics: Posted by ]Kami[ — Sun Feb 15, 2004 8:20 pm

supposed 1.6.x eggdrop exploit posted on bugtraq

2004-02-15T14:59:03-04:00

I would advise an upgrade to 1.6.16 when it comes out.

There are a few bugs that have been ironed out in the source tree. IPv6 has been stripped, which was the mega headache.

wooo

when is .16 going public for release?
I hope soon

because this http://www.securityfocus.com/bid/9606/info/ is not good :<

MfG JM

Statistics: Posted by MasterJM — Sun Feb 15, 2004 2:59 pm

supposed 1.6.x eggdrop exploit posted on bugtraq

2004-02-13T15:42:50-04:00

I would advise an upgrade to 1.6.16 when it comes out.

There are a few bugs that have been ironed out in the source tree. IPv6 has been stripped, which was the mega headache.

Statistics: Posted by ppslim — Fri Feb 13, 2004 3:42 pm

supposed 1.6.x eggdrop exploit posted on bugtraq

2004-02-12T12:18:39-04:00

from dun_dacil:
/* If it's a share bot that hasnt been sharing, ask again */
} else if (!(dcc.status & STAT_SHARE)) {
if (dcc.user && (bot_flags(dcc.user) & BOT_AGGRESSIVE)) {
dprintf(i, "s u?\n");
dcc.status |= STAT_OFFERED;
}
}
}
}

you just have to add a { behind the 2nd "...& BOT_AGGRESSIVE))" and a } behind "..STAT_OFFERED;"

Statistics: Posted by GodOfSuicide — Thu Feb 12, 2004 12:18 pm

supposed 1.6.x eggdrop exploit posted on bugtraq

2004-02-12T10:32:18-04:00

Hope there will me a 1.6.13 patch soon.
I don't want to upgrade when 1.6.16 gets out and wait to see if there are bugs in it like in 1.6.15

Statistics: Posted by bobjuh — Thu Feb 12, 2004 10:32 am

supposed 1.6.x eggdrop exploit posted on bugtraq

2004-02-12T07:36:49-04:00

It has been fixed, though there are no work arounds other than to upgrade to 1.6.16 (when made available soon we hope) or to patch your current version.

Let me know what versions you want guys, and I will try and fix some patches up.

Statistics: Posted by ppslim — Thu Feb 12, 2004 7:36 am

supposed 1.6.x eggdrop exploit posted on bugtraq

2004-02-12T07:17:57-04:00

btw, is there a patch for .13 out ? dont want to upgrade

Statistics: Posted by GodOfSuicide — Thu Feb 12, 2004 7:17 am

Re: supposed 1.6.x eggdrop exploit posted on bugtraq

2004-02-10T11:10:11-04:00

The origenal mail

http://mogan.nonsoloirc.com/egg_advisory.txt also was send to eggdev list

Yeah, from that message:

Issue date: 07/02/2004
[snip]
Vendor status:
===============
Notified on 07 February 2004

/me nods

Statistics: Posted by egghead — Tue Feb 10, 2004 11:10 am