CVE-2016-7144

The mauthenticate function in modules/msasl.c in UnrealIRCd before 3.2.10.7 and 4.x before 4.0.6 allows remote attackers to spoof certificate fingerprints and consequently log in as another user via a crafted AUTHENTICATE parameter...

CVE-2016-7144

The CVE-2016-7144 entry relates to UnrealIRCd where the m_authenticate function in modules/m_sasl.c enables remote attackers to spoof certificate fingerprints and log in as another user via a crafted AUTHENTICATE parameter. Affected versions are UnrealIRCd before 3.2.10.7 and 4.x before 4.0.6. Th...

PT-2017-9092

Name of the Vulnerable Software and Affected Versions UnrealIRCd versions prior to 3.2.10.7 UnrealIRCd versions 4.x prior to 4.0.6 Description The issue allows remote attackers to spoof certificate fingerprints, enabling them to log in as another user. This is achieved by crafting the AUTHENTICAT...

CVE-2016-7144: Improper Authentication

The mauthenticate function in modules/msasl.c in UnrealIRCd before 3.2.10.7 and 4.x before 4.0.6 allows remote attackers to spoof certificate fingerprints and consequently log in as another user via a crafted AUTHENTICATE parameter...

unrealircd.org XSS vulnerability

Vulnerable URL: https://www.unrealircd.org/docwiki/thumb.php?f=x%23%3Cbody%09onmousemove=confirm%28%27XSSPOSED%27%29%3E Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 11:07 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

FreeBSD : unreal -- denial of service (0ecc1f55-45d0-11e5-adde-14dae9d210b8)

Unreal reports : Summary: If SASL support is enabled in UnrealIRCd this is not the default and is also enabled in your services package then a malicious user with a services account can cause UnrealIRCd to crash. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and packag...

unreal -- denial of service

Unreal reports: Summary: If SASL support is enabled in UnrealIRCd this is not the default and is also enabled in your services package then a malicious user with a services account can cause UnrealIRCd to crash...

UnrealIRCD 3.2.8.1 后门

No description provided by source...

UnrealIRCd 3.x Remote Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/17057/info UnrealIRCd is prone to a remote denial-of-service vulnerability. A remote attacker may exploit this issue to deny service for legitimate users. !/usr/bin/perl Denial of Service exploit for UnrealIRCd 3.2.3...

UnrealIRCD 3.2.8.1 Backdoor Command Execution

No description provided by source. $Id: unrealircd3281backdoor.rb 11227 2010-12-05 15:08:22Z mc $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and term...

UnrealIRCd 3.2.8.1 - Local Configuration Stack Overflow

No description provided by source. Exploit Title: UnrealIRCd local configuration stack overflow Date: 20/10/2011 Author: DiGMi http://digmi.org Software Link: http://www.unrealircd.com/downloads/Unreal3.2.8.1.exe Version: 3.2.8.1 and probably every previous version Tested on: Windows 7 Details an...

CVE-2013-7384

UnrealIRCd 3.2.10 before 3.2.10.2 allows remote attackers to cause a denial of service NULL pointer dereference and crash via unspecified vectors, related to SSL. NOTE: this issue was SPLIT from CVE-2013-6413 per ADT2 due to different vulnerability types...

CVE-2013-6413

Use-after-free vulnerability in UnrealIRCd 3.2.10 before 3.2.10.2 allows remote attackers to cause a denial of service crash via unspecified vectors. NOTE: this identifier was SPLIT per ADT2 due to different vulnerability types. CVE-2013-7384 was assigned for the NULL pointer dereference...

Null pointer dereference

UnrealIRCd 3.2.10 before 3.2.10.2 allows remote attackers to cause a denial of service NULL pointer dereference and crash via unspecified vectors, related to SSL. NOTE: this issue was SPLIT from CVE-2013-6413 per ADT2 due to different vulnerability types...

CVE-2013-7384

UnrealIRCd 3.2.10 before 3.2.10.2 allows remote attackers to cause a denial of service NULL pointer dereference and crash via unspecified vectors, related to SSL. NOTE: this issue was SPLIT from CVE-2013-6413 per ADT2 due to different vulnerability types...

CVE-2013-6413

Use-after-free vulnerability in UnrealIRCd 3.2.10 before 3.2.10.2 allows remote attackers to cause a denial of service crash via unspecified vectors. NOTE: this identifier was SPLIT per ADT2 due to different vulnerability types. CVE-2013-7384 was assigned for the NULL pointer dereference...

CVE-2013-6413

UnrealIRCd 3.2.10 before 3.2.10.2 is affected. The issue is a NULL pointer dereference in the SSL-related code path that can be triggered remotely, causing a denial of service (crash). This CVE is a split from CVE-2013-6413; CVE-2013-7384 covers the NULL pointer dereference. Affected installation...

PT-2014-3106

Name of the Vulnerable Software and Affected Versions UnrealIRCd versions 3.2.10 through 3.2.10.1 Description A use-after-free issue allows remote attackers to cause a denial of service, resulting in a crash, via unspecified vectors. Recommendations For UnrealIRCd versions 3.2.10 through 3.2.10.1...

CVE-2013-7384: Undefined Security Weakness

UnrealIRCd 3.2.10 before 3.2.10.2 allows remote attackers to cause a denial of service NULL pointer dereference and crash via unspecified vectors, related to SSL. NOTE: this issue was SPLIT from CVE-2013-6413 per ADT2 due to different vulnerability types...

CVE-2013-6413: Undefined Security Weakness

Use-after-free vulnerability in UnrealIRCd 3.2.10 before 3.2.10.2 allows remote attackers to cause a denial of service crash via unspecified vectors. NOTE: this identifier was SPLIT per ADT2 due to different vulnerability types. CVE-2013-7384 was assigned for the NULL pointer dereference...