Skip to content
Noroxi

universal ircd records

8 published records for vendor universal ircd.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
0
With a fix record
37.5%
Median publish → KEV
No record has entered KEV

Records by year

    Bar: total · dark part: CISA KEV.

    Recurring classes

      The weakness classes this vendor ships most often: where to look.

      CWE

      Attack profile

      All records

      8 records
      • CVE-2007-4404
        32Monitor

        ircu 2.10.12.01 allows remote attackers to (1) cause a denial of service (flood wallops) by joining two channels with certain long names tha

        HighCVSS 7.8No exploitEPSS 2%

        universal ircd · ircuAug 18, 2007

      • CVE-2007-4405
        32Monitor

        ircu 2.10.12.02 through 2.10.12.04 allows remote attackers to cause a denial of service (memory and bandwidth consumption) by creating a lar

        HighCVSS 7.8No exploitEPSS 1%

        universal ircd · ircuAug 18, 2007

      • CVE-2007-4406
        30Monitor

        ircu 2.10.12.01 through 2.10.12.04 does not remove ops privilege after a join from a server with an older timestamp (TS), which allows remot

        HighCVSS 7.5No exploitEPSS 1%

        universal ircd · ircuAug 18, 2007

      • CVE-2007-4407
        25Monitor

        ircu 2.10.12.03 and 2.10.12.04 does not associate a timestamp with ops privilege on an unused channel (zannel), which allows remote attacker

        MediumCVSS 6.4No exploitEPSS 1%

        universal ircd · ircuAug 18, 2007

      • CVE-2007-4410
        24Monitor

        ircu 2.10.12.05 and earlier does not properly synchronize a kick action in certain cross scenarios, which allows remote authenticated operat

        MediumCVSS 6.0No exploitEPSS 1%

        universal ircd · ircuAug 18, 2007

      • CVE-2007-4409
        20Monitor

        Race condition in ircu 2.10.12.01 through 2.10.12.05 allows remote attackers to set a new Apass during a netburst by arranging for ops privi

        MediumCVSS 5.1No exploitEPSS 1%

        universal ircd · ircuAug 18, 2007

      • CVE-2007-4408
        20Monitor

        ircu 2.10.12.05 and earlier ignores timestamps in bounces, which allows remote attackers to take over a channel during a netjoin by causing

        MediumCVSS 5.0No exploitEPSS 1%

        universal ircd · ircuAug 18, 2007

      • CVE-2007-4411
        17Monitor

        ircu 2.10.12.05 and earlier allows remote attackers to discover the hidden IP address of arbitrary +x users via a series of /silence command

        MediumCVSS 4.3No exploitEPSS 1%

        universal ircd · ircuAug 18, 2007