PT-2007-5592 · Undernet · Ircu

Publicado 2007-08-18 · Atualizado 2018-10-15 · CVE-2007-4411

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions ircu versions 2.10.12.05 and earlier

Description The issue allows remote attackers to discover the hidden IP address of arbitrary +x users. This can be achieved via a series of /silence commands with specific arguments, such as (1) CIDR mask arguments or (2) certain other arguments that represent groups of IP addresses, and then monitoring CTCP ping replies.

Recommendations For ircu versions 2.10.12.05 and earlier, consider restricting or disabling the use of the /silence command with CIDR mask arguments or certain other group-representing arguments until a fix is available. Additionally, limiting the ability to monitor CTCP ping replies may help minimize the risk of exploitation.

Exploit

Correção

Identificadores relacionados

CVE-2007-4411

Produtos afetados

Ircu

Referências · 8

• 🔥 http://securityfocus.com/bid/25285 · Exploit
• http://securityfocus.com/archive/1/476285/100/0/threaded · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/35997 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-4411 · Nota de Segurança
• https://osv.dev/vulnerability/DEBIAN-CVE-2007-4411 · Aviso do Fabricante
• http://securityreason.com/securityalert/3031 · Nota
• https://osv.dev/vulnerability/CVE-2007-4411 · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/CVE-2007-4411 · Aviso do Fabricante