CVE-2004-0679

The IP cloaking feature (cloak.c) in UnrealIRCd 3.2, and possibly other versions, uses a weak hashing scheme to hide IP addresses, which could allow remote attackers to use brute force methods to gain other user's IP addresses.

Score

CVSS 2.0 5.0 Medium

Status

Modified - cve@mitre.org

Published

2004-08-06

Last modified

2024-08-08

Affected products

• Unrealircd (Unreal)

References

• http://marc.info/?l=bugtraq&m=108904813003166&w=2
• http://securityreason.com/securityalert/560
• http://www.bandecon.com/advisory/unreal.txt
• http://www.securityfocus.com/bid/10663
• http://www.unrealircd.com/
• https://exchange.xforce.ibmcloud.com/vulnerabilities/16610