What’s Vulnerable › Vulnerabilities

CVE-2004-0679

• Severity: medium (CVSS 5.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.6% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2004-08-06 · updated 2026-06-16

Description

The IP cloaking feature (cloak.c) in UnrealIRCd 3.2, and possibly other versions, uses a weak hashing scheme to hide IP addresses, which could allow remote attackers to use brute force methods to gain other user's IP addresses.

Affected products

• Unrealircd: 3.1.1, 3.1.3, 3.2, 3.2_.0_beta_10

References

• http://marc.info/?l=bugtraq&m=108904813003166&w=2
• http://securityreason.com/securityalert/560
• http://www.bandecon.com/advisory/unreal.txt
• http://www.securityfocus.com/bid/10663
• http://www.unrealircd.com/
• https://exchange.xforce.ibmcloud.com/vulnerabilities/16610
• http://marc.info/?l=bugtraq&m=108904813003166&w=2
• http://securityreason.com/securityalert/560
• http://www.bandecon.com/advisory/unreal.txt
• http://www.securityfocus.com/bid/10663
• http://www.unrealircd.com/
• https://exchange.xforce.ibmcloud.com/vulnerabilities/16610

Get alerted when CVE-2004-0679 or the next vulnerability affects your stack