CVE-1999-1351

Summary

CVE-1999-1351 is a directory traversal vulnerability affecting the KVIrc IRC client version 0.9.0. When the "Listen to !nick <soundname> requests" option is enabled, a remote attacker can exploit this issue by sending a malicious DCC (Direct Client-to-Client) GET request containing a ".." (dot dot) sequence. This allows the attacker to read arbitrary files on the victim's system, potentially exposing sensitive information. The vulnerability can be exploited even if the user has not initiated the DCC connection, making it a serious concern for IRC users running the affected KVIrc client version.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.