5

CVE-2004-0679

The IP cloaking feature (cloak.c) in UnrealIRCd 3.2, and possibly other versions, uses a weak hashing scheme to hide IP addresses, which could allow remote attackers to use brute force methods to gain other user's IP addresses.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Unreal ≫ Unrealircd Version 3.1.1
Unreal ≫ Unrealircd Version 3.1.3
Unreal ≫ Unrealircd Version 3.2
Unreal ≫ Unrealircd Version 3.2_.0_beta_10
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.57% 0.721
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 5 10 2.9
AV:N/AC:L/Au:N/C:P/I:N/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://marc.info/?l=bugtraq&m=108904813003166&w=2
http://securityreason.com/securityalert/560
http://www.bandecon.com/advisory/unreal.txt
http://www.securityfocus.com/bid/10663
Patch
Vendor Advisory
http://www.unrealircd.com/
https://exchange.xforce.ibmcloud.com/vulnerabilities/16610