The IP cloaking feature (cloak.c) in UnrealIRCd 3.2, and possibly other versions, uses a weak hashing scheme to hide IP addresses, which could allow remote malicious users to use brute force methods to gain other user's IP addresses.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
unreal unrealircd 3.1.1 |
||
unreal unrealircd 3.1.3 |
||
unreal unrealircd 3.2 |
||
unreal unrealircd 3.2_.0_beta_10 |