CVE-1999-1351

Medium

Published: 24/09/1999(UTC)Updated: 16/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

1.61%

73th percentile - higher than 73% of all known CVEs

Summary

KVIrc IRC client 0.9.0 has a directory traversal vulnerability when the 'Listen to !nick <soundname> requests' option is enabled. This allows remote attackers to read arbitrary files via a .. (dot dot) in a DCC GET request.

Risk Assessment

This vulnerability may lead to the disclosure of sensitive information from the system, posing a serious security threat to the organization.

Recommendation

It is recommended to disable the 'Listen to !nick <soundname> requests' option and update KVIrc to the latest version to minimize risk.

Original NVD description (English source)

Directory traversal vulnerability in KVIrc IRC client 0.9.0 with the "Listen to !nick <soundname> requests" option enabled allows remote attackers to read arbitrary files via a .. (dot dot) in a DCC GET request.