Lucene search

K
cve[email protected]CVE-2007-4411
HistoryAug 18, 2007 - 9:17 p.m.

CVE-2007-4411

2007-08-1821:17:00
web.nvd.nist.gov
18
cve-2007-4411
nvd
information security
remote attack
ip address discovery
ircu 2.10.12.05

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

6.9 Medium

AI Score

Confidence

High

0.005 Low

EPSS

Percentile

75.3%

ircu 2.10.12.05 and earlier allows remote attackers to discover the hidden IP address of arbitrary +x users via a series of /silence commands with (1) CIDR mask arguments or (2) certain other arguments that represent groups of IP addresses, then monitoring CTCP ping replies.

Affected configurations

NVD
Node
universal_ircdircuRange2.10.12.05

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

6.9 Medium

AI Score

Confidence

High

0.005 Low

EPSS

Percentile

75.3%