PT-2007-5592 · Undernet · Ircu

Published 2007-08-18 · Updated 2018-10-15 · CVE-2007-4411

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions ircu versions 2.10.12.05 and earlier

Description The issue allows remote attackers to discover the hidden IP address of arbitrary +x users. This can be achieved via a series of /silence commands with specific arguments, such as (1) CIDR mask arguments or (2) certain other arguments that represent groups of IP addresses, and then monitoring CTCP ping replies.

Recommendations For ircu versions 2.10.12.05 and earlier, consider restricting or disabling the use of the /silence command with CIDR mask arguments or certain other group-representing arguments until a fix is available. Additionally, limiting the ability to monitor CTCP ping replies may help minimize the risk of exploitation.

Exploit

Fix

Related Identifiers

CVE-2007-4411

Affected Products

Ircu

References · 8

• 🔥 http://securityfocus.com/bid/25285 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2007-4411 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2007-4411 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2007-4411 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2007-4411 · Vendor Advisory
• http://securityfocus.com/archive/1/476285/100/0/threaded · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/35997 · Note
• http://securityreason.com/securityalert/3031 · Note