CVE-2007-4409

2007-08-1821:17:00

[email protected]

web.nvd.nist.gov

cve-2007-4409

race condition

ircu

remote attackers

apass

netburst

ops privilege

security vulnerability

5.1 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

6.7 Medium

AI Score

Confidence

High

0.015 Low

EPSS

Percentile

87.2%

JSON

Race condition in ircu 2.10.12.01 through 2.10.12.05 allows remote attackers to set a new Apass during a netburst by arranging for ops privilege to be granted before the mode arrives.

Affected configurations

NVD

Node

universal_ircdircuMatch2.10.12.01

universal_ircdircuMatch2.10.12.02

universal_ircdircuMatch2.10.12.03

universal_ircdircuMatch2.10.12.04

universal_ircdircuMatch2.10.12.05

CPENameOperatorVersion
universal_ircd:ircuuniversal ircd ircueq2.10.12.01
universal_ircd:ircuuniversal ircd ircueq2.10.12.02
universal_ircd:ircuuniversal ircd ircueq2.10.12.03
universal_ircd:ircuuniversal ircd ircueq2.10.12.04
universal_ircd:ircuuniversal ircd ircueq2.10.12.05

CPE	Name	Operator	Version
universal_ircd:ircu	universal ircd ircu	eq	2.10.12.01
universal_ircd:ircu	universal ircd ircu	eq	2.10.12.02
universal_ircd:ircu	universal ircd ircu	eq	2.10.12.03
universal_ircd:ircu	universal ircd ircu	eq	2.10.12.04
universal_ircd:ircu	universal ircd ircu	eq	2.10.12.05