CVE-2007-4411 Information disclosure in n/a

Medium 4.3 Published 18 Aug 2007 Updated 7 Aug 2024

Remote attackers can discover hidden IP addresses of specific users by exploiting silence command handling in the IRC server.

Exploited in the wild: Not known
Login needed: Any signed-in user
Attackable: Over the internet
Victim action needed: Not needed
Fix: Available

What is CVE-2007-4411?

CVE-2007-4411 is a medium-severity vulnerability in n/a, published on 18 Aug 2007. Any signed-in user can exploit it over the network, with no action from the victim.

Official description

ircu 2.10.12.05 and earlier allows remote attackers to discover the hidden IP address of arbitrary +x users via a series of /silence commands with (1) CIDR mask arguments or (2) certain other arguments that represent groups of IP addresses, then monitoring CTCP ping replies.

Which versions are affected by CVE-2007-4411?

It affects 1 product.

Products include Universal Ircd Ircu.

How do I fix CVE-2007-4411?

Upgrade to a fixed version.

Is CVE-2007-4411 being exploited?

There is no known exploitation of CVE-2007-4411 in the wild and no public exploit code.

Sources

Also known as DEBIAN-CVE-2007-4411, GHSA-6wgv-cpj2-hjhf.