CVE-2006-6811

KsIRC 1.3.12 allows remote attackers to cause a denial of service (crash) via a long PRIVMSG string when connecting to an Internet Relay Chat (IRC) server, which causes an assertion failure and results in a NULL pointer dereference. NOTE: this issue was originally reported as a buffer overflow.

• CWE-617

• http://osvdb.org/33443Broken Link
• http://security.gentoo.org/glsa/glsa-200701-26.xmlThird Party Advisory
• http://securitytracker.com/id?1017453Broken Link, Third Party Advisory, VDB Entry
• http://www.addict3d.org/index.php?page=viewarticle&trace=0&type=security&ID=8468Broken Link
• http://www.kde.org/info/security/advisory-20070109-1.txtThird Party Advisory
• http://www.mandriva.com/security/advisories?name=MDKSA-2007:009Broken Link
• http://www.securityfocus.com/archive/1/456379/100/0/threadedBroken Link, Third Party Advisory, VDB Entry
• http://www.securityfocus.com/bid/21790Broken Link, Exploit, Third Party Advisory, VDB Entry
• http://www.ubuntu.com/usn/usn-409-1Third Party Advisory
• http://www.vupen.com/english/advisories/2006/5199Broken Link
• https://exchange.xforce.ibmcloud.com/vulnerabilities/31134Third Party Advisory, VDB Entry
• https://issues.rpath.com/browse/RPL-922Broken Link
• https://www.exploit-db.com/exploits/3023Exploit, Third Party Advisory, VDB Entry
• http://osvdb.org/33443Broken Link
• http://security.gentoo.org/glsa/glsa-200701-26.xmlThird Party Advisory
• http://securitytracker.com/id?1017453Broken Link, Third Party Advisory, VDB Entry
• http://www.addict3d.org/index.php?page=viewarticle&trace=0&type=security&ID=8468Broken Link
• http://www.kde.org/info/security/advisory-20070109-1.txtThird Party Advisory
• http://www.mandriva.com/security/advisories?name=MDKSA-2007:009Broken Link
• http://www.securityfocus.com/archive/1/456379/100/0/threadedBroken Link, Third Party Advisory, VDB Entry
• http://www.securityfocus.com/bid/21790Broken Link, Exploit, Third Party Advisory, VDB Entry
• http://www.ubuntu.com/usn/usn-409-1Third Party Advisory
• http://www.vupen.com/english/advisories/2006/5199Broken Link
• https://exchange.xforce.ibmcloud.com/vulnerabilities/31134Third Party Advisory, VDB Entry
• https://issues.rpath.com/browse/RPL-922Broken Link
• https://www.exploit-db.com/exploits/3023Exploit, Third Party Advisory, VDB Entry

Published

Dec 29, 2006

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2006-6805SQL injection vulnerability in newsdetail.asp in Enthrallweb…
• CVE-2006-6806SQL injection vulnerability in newsdetail.asp in Enthrallweb…
• CVE-2006-6807SQL injection vulnerability in list.asp in Softwebs Nepal (a…
• CVE-2006-6808Cross-site scripting (XSS) vulnerability in wp-admin/templat…
• CVE-2006-6809Multiple PHP remote file inclusion vulnerabilities in proces…
• CVE-2006-6810Unspecified vulnerability in the clear_user_list function in…
• CVE-2006-6812Multiple PHP remote file inclusion vulnerabilities in myPHPC…
• CVE-2006-6813SQL injection vulnerability in detail.asp in Mxmania File Up…
• CVE-2006-6814Directory traversal vulnerability in FolderManager/FolderMan…
• CVE-2006-6815Multiple cross-site scripting (XSS) vulnerabilities in DMXRe…
• CVE-2006-6816Multiple SQL injection vulnerabilities in DMXReady Secure Lo…
• CVE-2006-6817AlstraSoft Web Host Directory allows remote attackers to obt…