CVE-2007-4409 Race condition in ircu 2.10.12.01 through 2.10.12.05 allows remote attackers to set a new Apass during a netburst by arranging for ops privilege to be granted before the mode arrives.
MediumCVSS 5.1
EPSS 1.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Race condition in ircu 2.10.12.01 through 2.10.12.05 allows remote attackers to set a new Apass during a netburst by arranging for ops privilege to be granted before the mode arrives.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| universal ircd ircu | = 2.10.12.01 | No fix listed |
| universal ircd ircu | = 2.10.12.02 | No fix listed |
| universal ircd ircu | = 2.10.12.03 | No fix listed |
| universal ircd ircu | = 2.10.12.04 | No fix listed |
| universal ircd ircu | = 2.10.12.05 | No fix listed |
References
- 46714 vdb-entry
- 3031 third-party-advisory
- 20070812 Multiple vulnerabilities in ircu mailing-list
- 25285 exploit vdb-entry
- ircu-netburst-unauthorized-access(35995) vdb-entry
- Debian Security Tracker CVE-2007-4409 vendor-advisory