117 matches found
UnrealIRCd Local Elevation of Privilege Vulnerability
UnrealIRCd is an open source IRC server developed by the UnrealIRCd project team. A security vulnerability exists in UnrealIRCd 4.0.13 and earlier versions. A local attacker can exploit the vulnerability to terminate arbitrary processes...
CVE-2017-13649
UnrealIRCd 4.0.13 and earlier creates a PID file after dropping privileges to a non-root account, which might allow local users to kill arbitrary processes by leveraging access to this non-root account for PID file modification before a root script executes a "kill cat /pathname" command. NOTE: t...
CVE-2017-13649
UnrealIRCd 4.0.13 and earlier creates a PID file after dropping privileges to a non-root account, which might allow local users to kill arbitrary processes by leveraging access to this non-root account for PID file modification before a root script executes a "kill cat /pathname" command. NOTE: t...
Command injection
UnrealIRCd 4.0.13 and earlier creates a PID file after dropping privileges to a non-root account, which might allow local users to kill arbitrary processes by leveraging access to this non-root account for PID file modification before a root script executes a "kill cat /pathname" command. NOTE: t...
CVE-2017-13649
UnrealIRCd 4.0.13 and earlier creates a PID file after dropping privileges to a non-root account, which might allow local users to kill arbitrary processes by leveraging access to this non-root account for PID file modification before a root script executes a "kill cat /pathname" command. NOTE: t...
CVE-2017-13649
UnrealIRCd 4.0.13 and earlier is affected: after dropping privileges to a non-root account, a PID file is created which could let local users modify the PID file and influence a root script’s kill command on a path specified by the attacker. The vendor notes there is no common scenario where a ro...
UnrealIRCd Detection
Detection of UnrealIRCd Daemon. This script sends a request to the server and gets the version from the response. Copyright C 2017 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
UnrealIRCd Authentication Spoofing Vulnerability
UnrealIRCd is prone to authentication spoofing vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Code injection
The mauthenticate function in modules/msasl.c in UnrealIRCd before 3.2.10.7 and 4.x before 4.0.6 allows remote attackers to spoof certificate fingerprints and consequently log in as another user via a crafted AUTHENTICATE parameter...
CVE-2016-7144
The mauthenticate function in modules/msasl.c in UnrealIRCd before 3.2.10.7 and 4.x before 4.0.6 allows remote attackers to spoof certificate fingerprints and consequently log in as another user via a crafted AUTHENTICATE parameter...
CVE-2016-7144
The mauthenticate function in modules/msasl.c in UnrealIRCd before 3.2.10.7 and 4.x before 4.0.6 allows remote attackers to spoof certificate fingerprints and consequently log in as another user via a crafted AUTHENTICATE parameter...
CVE-2016-7144
The CVE-2016-7144 entry relates to UnrealIRCd where the m_authenticate function in modules/m_sasl.c enables remote attackers to spoof certificate fingerprints and log in as another user via a crafted AUTHENTICATE parameter. Affected versions are UnrealIRCd before 3.2.10.7 and 4.x before 4.0.6. Th...
CVE-2016-7144
The mauthenticate function in modules/msasl.c in UnrealIRCd before 3.2.10.7 and 4.x before 4.0.6 allows remote attackers to spoof certificate fingerprints and consequently log in as another user via a crafted AUTHENTICATE parameter...
unrealircd.org XSS vulnerability
Vulnerable URL: https://www.unrealircd.org/docwiki/thumb.php?f=x%23%3Cbody%09onmousemove=confirm%28%27XSSPOSED%27%29%3E Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 11:07 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...
FreeBSD : unreal -- denial of service (0ecc1f55-45d0-11e5-adde-14dae9d210b8)
Unreal reports : Summary: If SASL support is enabled in UnrealIRCd this is not the default and is also enabled in your services package then a malicious user with a services account can cause UnrealIRCd to crash. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and packag...
unreal -- denial of service
Unreal reports: Summary: If SASL support is enabled in UnrealIRCd this is not the default and is also enabled in your services package then a malicious user with a services account can cause UnrealIRCd to crash...
UnrealIRCD 3.2.8.1 后门
No description provided by source...
UnrealIRCd 3.2.8.1 - Local Configuration Stack Overflow
No description provided by source. Exploit Title: UnrealIRCd local configuration stack overflow Date: 20/10/2011 Author: DiGMi http://digmi.org Software Link: http://www.unrealircd.com/downloads/Unreal3.2.8.1.exe Version: 3.2.8.1 and probably every previous version Tested on: Windows 7 Details an...
UnrealIRCd 3.x Remote Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/17057/info UnrealIRCd is prone to a remote denial-of-service vulnerability. A remote attacker may exploit this issue to deny service for legitimate users. !/usr/bin/perl Denial of Service exploit for UnrealIRCd 3.2.3...
UnrealIRCD 3.2.8.1 Backdoor Command Execution
No description provided by source. $Id: unrealircd3281backdoor.rb 11227 2010-12-05 15:08:22Z mc $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and term...