VYPR
← All advisories
Unrated severityNVD Advisory· Published Aug 18, 2007· Updated Jun 16, 2026

CVE-2007-4407

CVE-2007-4407

Description

ircu 2.10.12.03 and 2.10.12.04 does not associate a timestamp with ops privilege on an unused channel (zannel), which allows remote attackers to (1) set or remove certain channel modes via a "netriding" attack or (2) take over a channel by joining an unlinked server with the A/Upass and then setting a new Apass.

Affected products

3
  • Ircu/Ircu3 versions
    cpe:2.3:a:universal_ircd:ircu:2.10.12.03:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:universal_ircd:ircu:2.10.12.03:*:*:*:*:*:*:*
    • cpe:2.3:a:universal_ircd:ircu:2.10.12.04:*:*:*:*:*:*:*
    • (no CPE)range: 2.10.12.03 - 2.10.12.04

Patches

Vulnerability mechanics

References

5

News mentions

0

No linked articles in our index yet.