Universal Ircd Server Multiple Remote Vulnerabilities

Bugtraq ID:	25285
Class:	Unknown
CVE:	CVE-2007-4405 CVE-2007-4406 CVE-2007-4407 CVE-2007-4408 CVE-2007-4409 CVE-2007-4410 CVE-2007-4404
Remote:	Yes
Local:	No
Published:	Aug 13 2007 12:00AM
Updated:	Jul 05 2016 10:00PM
Credit:	Wouter Coekaerts is credited with the discovery of these vulnerabilities.
Vulnerable:	Universal Ircd Universal Ircd 2.10.12 .05 Universal Ircd Universal Ircd 2.10.12 .04 Universal Ircd Universal Ircd 2.10.12 .03 Universal Ircd Universal Ircd 2.10.12 .02 Universal Ircd Universal Ircd 2.10.12 .01 Universal Ircd Universal Ircd 0
Not Vulnerable:

Universal Ircd Server Multiple Remote Vulnerabilities

Universal Ircd is prone to multiple remote vulnerabilities, including denial-of-service issues and privilege-escalation issues.

Successfully exploiting these issues allows remote attackers to crash servers, flood users with messages, gain operator privileges in channels, consume excessive server resources, and possibly launch other attacks.

Universal Ircd Server Multiple Remote Vulnerabilities

Specific exploit code is not required to trigger these issues. Attackers use an IRC client or readily available network utilities to exploit these issues.

Universal Ircd Server Multiple Remote Vulnerabilities

Solution:
Currently we are not aware of any vendor-supplied patches for these issues. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Universal Ircd Server Multiple Remote Vulnerabilities

References:

• Universal Ircd Home Page (Universal Ircd)
  
• Multiple vulnerabilities in ircu (Wouter Coekaerts )