CVE-2002-0425: mIRC DCC server protocol allows remote attackers to gain sensitive information such as alternate IRC nickna...

Security readout for executives and security teams

This CVE describes an information leak in the mIRC DCC server protocol. A remote party could cause the client to reveal an alternate IRC nickname in a response. The source bundle does not provide affected versions, CVSS scoring, a patch, or evidence of active exploitation. Exposure is likely limited to environments where legacy mIRC clients use or permit DCC server functionality. The bundle lists affected product/version data as not available, so vulnerability managers should not assume broad exposure without endpoint evidence. Treat this as low priority unless the organization still uses mIRC or IRC/DCC workflows. The business impact appears limited to nickname disclosure, but legacy unsupported software should still be removed or tightly controlled. Mitigation focus: Inventory endpoints for mIRC and DCC usage.; Check current vendor guidance or historical advisories for fixed versions.; Disable or restrict unnecessary DCC functionality where operationally feasible..

Prepared

Jun 30, 2026, 13:49 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.