CVE-2007-4406
ircu 2.10.12.01 through 2.10.12.04 does not remove ops privilege after a join from a server with...
CVE-2007-4406 is a high vulnerability (CVSS 7.5) in Universal Ircd Ircu, published August 18, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.50%, the 74th percentile. No source names a fixed version.
- Severity
- 7.5 HighCVSS 2.0, NVD
- Exploit chance
- 1.50%EPSS, 74th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
- No fix listedNo source names one
Description
ircu 2.10.12.01 through 2.10.12.04 does not remove ops privilege after a join from a server with an older timestamp (TS), which allows remote attackers to gain control of a channel during a split.
Exploit likelihood
Affected products
What each source reports
NVD Score used
ircu 2.10.12.01 through 2.10.12.04 does not remove ops privilege after a join from a server with an older timestamp (TS), which allows remote attackers to gain control of a channel during a split.
- Record
CVE-2007-4406- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE ListNo score
ircu 2.10.12.01 through 2.10.12.04 does not remove ops privilege after a join from a server with an older timestamp (TS), which allows remote attackers to gain control of a channel during a split.
- Record
CVE-2007-4406- Updated
- 2026-11-02
EUVDEUVD-2007-4389No score
ircu 2.10.12.01 through 2.10.12.04 does not remove ops privilege after a join from a server with an older timestamp (TS), which allows remote attackers to gain control of a channel during a split.
- Record
EUVD-2007-4389- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-xwfw-c659-qjpjNo score
ircu 2.10.12.01 through 2.10.12.04 does not remove ops privilege after a join from a server with...
ircu 2.10.12.01 through 2.10.12.04 does not remove ops privilege after a join from a server with an older timestamp (TS), which allows remote attackers to gain control of a channel during a split.
- Record
GHSA-xwfw-c659-qjpj- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| aliases, references, title | GitHub Advisories | |
| first indexed | CVE List, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.