Vulnerability in Kvirc Irc Client
CVE-1999-1351
Directory traversal vulnerability in KVIrc IRC client 0.9.0 with the "Listen to !nick <soundname> requests" option enabled allows remote attackers to read arbitrary files via a .. (dot dot) in a DCC GET request.
EPSS: 0.016 (73.4th percentile) — read the EPSS interpretation.
Affected products
- Kvirc Irc_client — versions 0.9.0
- N/a — versions n/a
References
- cve@mitre.org (vdb-entry, x_refsource_XF)
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)