CVE-2001-1488 Open Projects Network Internet Relay Chat (IRC) daemon u2.10.05.18 does not perform a double-reverse DNS lookup, which allows remote attackers to spoof any valid hostname on the Internet. NOTE: a foll...
MediumCVSS 5.0
EPSS 1.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Open Projects Network Internet Relay Chat (IRC) daemon u2.10.05.18 does not perform a double-reverse DNS lookup, which allows remote attackers to spoof any valid hostname on the Internet. NOTE: a followup post suggests that this is not an issue in the daemon.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| open projects network ircd | = u2.10.05.18 | No fix listed |
References
- 20011009 OpenProjects IRCD allows DNS spoofing mailing-list
- 20011014 Re: OpenProjects IRCD allows DNS spoofing mailing-list
- irc-openprojects-dns-spoofing(7283) vdb-entry