Date: Fri, 04 Dec 1998 03:28:57 -0800 From: Spikeman To: BUGTRAQ@netspace.org, PacketStorm@Genocide2600.com Subject: Licq It has been reported to myself that "Zman" has told the coder of Licq( Graham Roff ) about I do not know if this is true or not. But I thought I should say something . For those who do not know Licq is, Licq is an ICQ clone written fully in c++ using the Qt widget set. It is an attempt to give linux a non-java option to the ICQ protocol. If you telnet to the icq port( port scanning can find this ) of Licq, The program will "freeze" up you don't have to type anything after you telnet just the telneting to it will cause it to freeze, also When the "debug level" is set to "show all packets" if someone UDP floods that port it will coredump and crash... hopefully it will be fixed soon. Thanks to LoTuS ( lotus@aspi.net ) for helping with the testing of these holes..... ___ /\ \ ~`~ Spikeman ~`~ /::\ \ /:/\:\ \ http://www.genocide2600.com/~spikeman _\:\~\:\ \ /\ \:\ \:\__\ spikeman@myself.com \:\ \:\ \/__/ spikeman@genocide2600.com \:\ \:\__\ \:\/:/ / \::/ / \/__/