CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
AI Score
Confidence
High
EPSS
Percentile
81.4%
The IP cloaking feature (cloak.c) in UnrealIRCd 3.2, and possibly other versions, uses a weak hashing scheme to hide IP addresses, which could allow remote attackers to use brute force methods to gain other user’s IP addresses.
Vendor | Product | Version | CPE |
---|---|---|---|
unreal | unrealircd | 3.1.1 | cpe:2.3:a:unreal:unrealircd:3.1.1:*:*:*:*:*:*:* |
unreal | unrealircd | 3.1.3 | cpe:2.3:a:unreal:unrealircd:3.1.3:*:*:*:*:*:*:* |
unreal | unrealircd | 3.2 | cpe:2.3:a:unreal:unrealircd:3.2:*:*:*:*:*:*:* |
unreal | unrealircd | 3.2_.0_beta_10 | cpe:2.3:a:unreal:unrealircd:3.2_.0_beta_10:*:*:*:*:*:*:* |