Weak Hashing Scheme in IP Cloaking Feature of UnrealIRCd 3.2 Allows Brute Force IP Address Retrieval

CVE-2004-0679 · MEDIUM Severity

AV:N/AC:L/AU:N/C:P/I:N/A:N

The IP cloaking feature (cloak.c) in UnrealIRCd 3.2, and possibly other versions, uses a weak hashing scheme to hide IP addresses, which could allow remote attackers to use brute force methods to gain other user's IP addresses.

Learn more about our User Device Pen Test.