Unreal IRCD Multiple Vulnerabilities
BID:10811
Info
Unreal IRCD Multiple Vulnerabilities
| Bugtraq ID: | 10811 |
| Class: | Boundary Condition Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jul 27 2004 12:00AM |
| Updated: | Jul 27 2004 12:00AM |
| Credit: | Discovery is credited to The Level <[email protected]>. Research is attributed to ActiveX as well. |
| Vulnerable: |
Unreal UnrealIRCd 3.2.1 |
| Not Vulnerable: | |
Discussion
Unreal IRCD Multiple Vulnerabilities
Unreal ircd is prone to multiple vulnerabilities that may allow a remote attacker to execute arbitrary code on a vulnerable computer. If successful, the attacker may gain unauthorized access to the computer. The application is reportedly affected by a buffer overflow, a format string issue, and a command execution vulnerability.
A lack of details in the report does not allow for further information. This issue will be updated as more information becomes available.
It is reported that the process does not drop privileges properly, which could allow the attacker to gain super user access to a vulnerable computer.
Unreal ircd version 3.2.1 is reported prone to these issues. It is possible that other version are affected as well.
Update: Upon further analysis, it was discovered that most of these issues do not pose a security threat. One issue dealing with chroot is deemed to be a weakness and is assigned BID 10814 (Unreal IRCD CHRoot Local Privilege Escalation Weakness). This BID is being retired.
Unreal ircd is prone to multiple vulnerabilities that may allow a remote attacker to execute arbitrary code on a vulnerable computer. If successful, the attacker may gain unauthorized access to the computer. The application is reportedly affected by a buffer overflow, a format string issue, and a command execution vulnerability.
A lack of details in the report does not allow for further information. This issue will be updated as more information becomes available.
It is reported that the process does not drop privileges properly, which could allow the attacker to gain super user access to a vulnerable computer.
Unreal ircd version 3.2.1 is reported prone to these issues. It is possible that other version are affected as well.
Update: Upon further analysis, it was discovered that most of these issues do not pose a security threat. One issue dealing with chroot is deemed to be a weakness and is assigned BID 10814 (Unreal IRCD CHRoot Local Privilege Escalation Weakness). This BID is being retired.
Exploit / POC
Unreal IRCD Multiple Vulnerabilities
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution / Fix
Unreal IRCD Multiple Vulnerabilities
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.