Vulnerability Details CVE-2004-0679
The IP cloaking feature (cloak.c) in UnrealIRCd 3.2, and possibly other versions, uses a weak hashing scheme to hide IP addresses, which could allow remote attackers to use brute force methods to gain other user's IP addresses.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.006
EPSS Ranking 68.4%
CVSS Severity
CVSS v2 Score 5.0
References
- http://marc.info/?l=bugtraq&m=108904813003166&w=2
- http://securityreason.com/securityalert/560
- http://www.bandecon.com/advisory/unreal.txt
- http://www.securityfocus.com/bid/10663
- http://www.unrealircd.com/
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16610
- http://marc.info/?l=bugtraq&m=108904813003166&w=2
- http://securityreason.com/securityalert/560
- http://www.bandecon.com/advisory/unreal.txt
- http://www.securityfocus.com/bid/10663
- http://www.unrealircd.com/
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16610
Products affected by CVE-2004-0679
-
cpe:2.3:a:unreal:unrealircd:3.1.1
-
cpe:2.3:a:unreal:unrealircd:3.1.3
-
cpe:2.3:a:unreal:unrealircd:3.2
-
cpe:2.3:a:unreal:unrealircd:3.2_.0_beta_10