NetSight
high7.5

CVE-2007-4406

ircu 2.10.12.01 through 2.10.12.04 does not remove ops privilege after a join from a server with an older timestamp (TS), which allows remote attackers to gain…

Impact

ircu 2.10.12.01 through 2.10.12.04 does not remove ops privilege after a join from a server with an older timestamp (TS), which allows remote attackers to gain control of a channel during a split.

Affected products

VendorProductAffected versions
Universal IrcdIrcu
Versions 2.10.12.01, 2.10.12.02, 2.10.12.03, 2.10.12.04

References