UnrealIRCd Backdoor Unauthorized Access Vulnerability
BID:40820
Info
UnrealIRCd Backdoor Unauthorized Access Vulnerability
| Bugtraq ID: | 40820 |
| Class: | Access Validation Error |
| CVE: |
CVE-2010-2075 |
| Remote: | Yes |
| Local: | No |
| Published: | Jun 12 2010 12:00AM |
| Updated: | Apr 13 2015 09:02PM |
| Credit: | Reported by the vendor. |
| Vulnerable: |
Unreal UnrealIRCd 3.2.8.1 Gentoo Linux |
| Not Vulnerable: | |
Discussion
UnrealIRCd Backdoor Unauthorized Access Vulnerability
UnrealIRCd is prone to an unauthorized-access vulnerability due to a backdoor in certain versions of the application.
Successful exploits allow remote attackers to execute arbitrary system commands in the context of the affected application.
The issue affects Unreal 3.2.8.1 for Linux. Reportedly, package Unreal3.2.8.1.tar.gz downloaded in November 2009 and later is affected. The MD5 sum of the affected file is 752e46f2d873c1679fa99de3f52a274d. Files with the MD5 sum of 7b741e94e867c0a7370553fd01506c66 are not affected.
UnrealIRCd is prone to an unauthorized-access vulnerability due to a backdoor in certain versions of the application.
Successful exploits allow remote attackers to execute arbitrary system commands in the context of the affected application.
The issue affects Unreal 3.2.8.1 for Linux. Reportedly, package Unreal3.2.8.1.tar.gz downloaded in November 2009 and later is affected. The MD5 sum of the affected file is 752e46f2d873c1679fa99de3f52a274d. Files with the MD5 sum of 7b741e94e867c0a7370553fd01506c66 are not affected.
Exploit / POC
UnrealIRCd Backdoor Unauthorized Access Vulnerability
An attacker can use readily available network utilities to exploit this issue.
The following exploits are available:
An attacker can use readily available network utilities to exploit this issue.
The following exploits are available:
Solution / Fix
UnrealIRCd Backdoor Unauthorized Access Vulnerability
Solution:
The vendor released an advisory to address the issue. Please see the references for more information.
Solution:
The vendor released an advisory to address the issue. Please see the references for more information.
References
UnrealIRCd Backdoor Unauthorized Access Vulnerability
References:
References:
- UnrealIRCd Homepage (Unreal)
- Unreal advisory (Unreal)