Lucene search

K
cveMitreCVE-2004-0679
HistoryAug 06, 2004 - 4:00 a.m.

CVE-2004-0679

2004-08-0604:00:00
mitre
web.nvd.nist.gov
31
cve-2004-0679
ip cloaking
unrealircd 3.2
weak hashing
brute force
nvd

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

AI Score

7

Confidence

High

EPSS

0.008

Percentile

81.4%

The IP cloaking feature (cloak.c) in UnrealIRCd 3.2, and possibly other versions, uses a weak hashing scheme to hide IP addresses, which could allow remote attackers to use brute force methods to gain other user’s IP addresses.

Affected configurations

Nvd
Node
unrealunrealircdMatch3.1.1
OR
unrealunrealircdMatch3.1.3
OR
unrealunrealircdMatch3.2
OR
unrealunrealircdMatch3.2_.0_beta_10
VendorProductVersionCPE
unrealunrealircd3.1.1cpe:2.3:a:unreal:unrealircd:3.1.1:*:*:*:*:*:*:*
unrealunrealircd3.1.3cpe:2.3:a:unreal:unrealircd:3.1.3:*:*:*:*:*:*:*
unrealunrealircd3.2cpe:2.3:a:unreal:unrealircd:3.2:*:*:*:*:*:*:*
unrealunrealircd3.2_.0_beta_10cpe:2.3:a:unreal:unrealircd:3.2_.0_beta_10:*:*:*:*:*:*:*

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

AI Score

7

Confidence

High

EPSS

0.008

Percentile

81.4%

Related for CVE-2004-0679