CVE-2004-0679 Information

Description

The IP cloaking feature (cloak.c) in UnrealIRCd 3.2 and possibly other versions uses a weak hashing scheme to hide IP addresses which could allow remote attackers to use brute force methods to gain other user’s IP addresses.

Reference

http://marc.info/?l=bugtraq&m=108904813003166&w=2 http://securityreason.com/securityalert/560 http://www.bandecon.com/advisory/unreal.txt http://www.securityfocus.com/bid/10663 http://www.unrealircd.com/ https://exchange.xforce.ibmcloud.com/vulnerabilities/16610