Home | Networks | Community | Need Help? 

 
 Quick search

 
 
 RegisterRegister   Log inLog in 

mIRC 6.14 Exploit: How true is this?
Goto page Previous  1, 2, 3  Next
 
Post new topic   Reply to topic    SearchIRC Forum Index -> IRC Help
Author Message
al5001
Lurker
Lurker


Joined: 17 Jul 2003
Posts: 181
Location: Canada

PostPosted: Mar 25, 2004 8:15pm    Post subject: Reply with quote

Yes, not all of them have those ports open, however, the ones that do have the ports open gives you an idea to what operating system they run.
Back to top
uchat
Idler
Idler


Joined: 17 Mar 2004
Posts: 335

PostPosted: Mar 25, 2004 10:17pm    Post subject: Reply with quote

Quote:
Yes, not all of them have those ports open, however, the ones that do have the ports open gives you an idea to what operating system they run.


Not at all true, all the popular servers such as pop, imap, ftp, http, irc .. etc are available for all OS's.
Back to top
al5001
Lurker
Lurker


Joined: 17 Jul 2003
Posts: 181
Location: Canada

PostPosted: Mar 25, 2004 11:08pm    Post subject: Reply with quote

The point was totally missed. I was talking about ports 22 and 23. 23 is for telnet and 22 is for sshd. When you connect on them through telnet and it asks for a username, its obviously telnetd/sshd. If you get HTML code, it's obvious the person is running httpd off that port.

Not all operating systems run SSHd. Windows 2000 however, can run telnet service, but in very rare circumstances.
Back to top
Arvi
Guest





PostPosted: Mar 26, 2004 4:27am    Post subject: Reply with quote

al5001 wrote:
Not all operating systems run SSHd. Windows 2000 however, can run telnet service, but in very rare circumstances.


Never heard of an sshd for windows?
I do have one. Only good way to use a windows box.

Inform yourself before claiming things not being true!
Back to top
uchat
Idler
Idler


Joined: 17 Mar 2004
Posts: 335

PostPosted: Mar 26, 2004 6:08am    Post subject: Reply with quote

Quote:
Not all operating systems run SSHd. Windows 2000 however, can run telnet service, but in very rare circumstances.


Just one example:

http://lexa.mckenna.edu/sshwindows/ There is also sshd for windows 95/98

also with the invention of Cygwin you can run nearly everything a *nix box can .. including Xwindows, KDE ... etc.

My point is that you cannot be 100% positive what OS is running simply by what ports are open.
Back to top
[DiMENSiON]
Eleet
Eleet


Joined: 06 Sep 2003
Posts: 621

PostPosted: Mar 26, 2004 6:12am    Post subject: Reply with quote

Everyone should just use mIRC 6.01 like me, no one even bothers thinking about exploits for this version anymore :o)
Back to top
Horizon
Lurker
Lurker


Joined: 10 May 2003
Posts: 145
Location: Regina, Saskatchewan, Canada

PostPosted: Mar 26, 2004 8:36am    Post subject: Reply with quote

[DiMENSiON] wrote:
Everyone should just use mIRC 6.01 like me, no one even bothers thinking about exploits for this version anymore Surprised)



Umm are you sure about that? Wink

http://www.securiteam.com/windowsntfocus/5NP0R2KB5W.html

http://www.rootmode.com.ar/Secciones/Irc/Archivos/chat%20bugs.txt

http://www.securityfocus.com/bid/8728
Back to top
Any
Guest





PostPosted: Mar 26, 2004 12:59pm    Post subject: Reply with quote

Quote:
Not all operating systems run SSHd. Windows 2000 however, can run telnet service, but in very rare circumstances.


I run both a telnetd and sshd on my Win 2003 machine. I also run a telnetd and sshd on my Win XP machine.

Lets also not forget that Mac OS X is 99% compatible with FreeBSD software and therefore, it is also very easy to run telnetd/sshd on Mac (I have 5 shell accounts on different Mac OS X systems). Then there are other not-truly-UNIX oses. Take the old BeOS for example. You could run a telnetd/sshd on that.

Just because port 22 and 23 are open doesn't even mean that a telnetd/sshd is running. Nowhere is it required that 22 be used for ssh, I could run an httpd on 22 if I wanted to...
Back to top
ex0
Guest





PostPosted: Mar 26, 2004 4:52pm    Post subject: Reply with quote

of what relevance is this to the topic at hand..?
Back to top
codemastr
Idler
Idler


Joined: 05 Feb 2004
Posts: 353

PostPosted: Mar 26, 2004 6:35pm    Post subject: Reply with quote

Quote:
of what relevance is this to the topic at hand..?


None at all. Though it certainly does go to support my claim that the mIRC community would rather pretend a problem doesn't exist than openly confront it...
Back to top
Guest






PostPosted: Mar 31, 2004 6:14pm    Post subject: Reply with quote

There isnt a DCC problem with mirc, it's a script (dll file) that can be downloaded and executed trough mirc that is the problem... Mirc 6.14 is clean from exploits at the time being....

Read more at quakenet.org
Back to top
k1ll4
Guest





PostPosted: Apr 01, 2004 11:25am    Post subject: re: Reply with quote

The mIRC 6.14 exploit realy exists, i have been crashed a billion times.... it just disconnect's me from the IRC server and this is what happen's

[19:21] * [10053] Software caused connection abort
-
[19:21] * Disconnected
-
Back to top
magpie
Idler
Idler


Joined: 18 Jan 2004
Posts: 454
Location: Essex, UK

PostPosted: Apr 01, 2004 11:46am    Post subject: Reply with quote

That doesn't look like a crash, more like a crappy client/server connection.

The bug that supposedly existed was in fact a bug in a script being used, not mIRC 6.14, as has been said many times before. Khaled has even made a post regarding this on mIRC's forum.
Back to top
codemastr
Idler
Idler


Joined: 05 Feb 2004
Posts: 353

PostPosted: Apr 01, 2004 3:43pm    Post subject: Reply with quote

k1ll4

If indeed you are being exploited (which I doubt), it is definately not this exploit.

But, in case it is an exploit, what you should do is type /debug on

that will write debugging information to debug.log, then if you get disconnected (and by the way the error message you pasted there indicates an ISP error, not an exploit), it will tell you the last things you received. My guess is you won't see anything suspicious.
Back to top
uchat
Idler
Idler


Joined: 17 Mar 2004
Posts: 335

PostPosted: Apr 01, 2004 4:20pm    Post subject: Reply with quote

actually I find that writing to a text file works well with debug:

/debug file-name-here.txt
Back to top
Display posts from previous:   
Post new topic   Reply to topic    SearchIRC Forum Index -> IRC Help All times are GMT - 6 Hours
Goto page Previous  1, 2, 3  Next
Page 2 of 3

 
 
Forum powered by phpBB
 
 © 2000 - 2008 EverythingIRC, Inc. All rights reserved. Please read our disclaimer