CVE-2007-4406

2007-08-1821:00:00

mitre

www.cve.org

7 High

AI Score

Confidence

High

0.009 Low

EPSS

Percentile

82.8%

JSON

ircu 2.10.12.01 through 2.10.12.04 does not remove ops privilege after a join from a server with an older timestamp (TS), which allows remote attackers to gain control of a channel during a split.

References

osvdb.org/46717

securityreason.com/securityalert/3031

www.securityfocus.com/archive/1/476285/100/0/threaded

www.securityfocus.com/bid/25285