{"id":"CVE-2010-2075","aliases":["EUVD-2010-2094","GHSA-8hfg-rj44-xr2c"],"status":"published","title":"UnrealIRCd 3.2.8.1, as distributed on certain mirror sites from November 2009 through June 2010,...","description":"UnrealIRCd 3.2.8.1, as distributed on certain mirror sites from November 2009 through June 2010, contains an externally introduced modification (Trojan Horse) in the DEBUG3_DOLOG_SYSTEM macro, which allows remote attackers to execute arbitrary commands.","severity":{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.83534,"percentile":0.99687,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"cwes":["CWE-20"],"published":"2010-06-15T01:00:00Z","modified":"2026-06-16T23:19:56Z","exploits":[{"source":"exploitdb","id":"EDB-13853","title":"UnrealIRCd 3.2.8.1 - Remote Downloader/Execute","type":"remote","platform":"linux","date":"2010-06-13","verified":true,"url":"https://www.exploit-db.com/exploits/13853"},{"source":"exploitdb","id":"EDB-16922","title":"UnrealIRCd 3.2.8.1 - Backdoor Command Execution (Metasploit)","type":"remote","platform":"linux","date":"2010-12-05","verified":true,"url":"https://www.exploit-db.com/exploits/16922"},{"source":"metasploit","id":"exploit/unix/irc/unreal_ircd_3281_backdoor","title":"UnrealIRCD 3.2.8.1 Backdoor Command Execution","type":"exploit","platform":"Linux,Unix","date":"2010-06-12","verified":true,"url":"https://www.rapid7.com/db/modules/exploit/unix/irc/unreal_ircd_3281_backdoor"},{"source":"pocgithub","id":"Elazab2005/unrealircd-backdoor-pentest-report","title":"Elazab2005/unrealircd-backdoor-pentest-report","date":"2026-08-20","url":"https://github.com/Elazab2005/unrealircd-backdoor-pentest-report"},{"source":"pocgithub","id":"FredBrave/CVE-2010-2075-UnrealIRCd-3.2.8.1","title":"FredBrave/CVE-2010-2075-UnrealIRCd-3.2.8.1","date":"2023-05-31","url":"https://github.com/FredBrave/CVE-2010-2075-UnrealIRCd-3.2.8.1"},{"source":"pocgithub","id":"JoseLRC97/UnrealIRCd-3.2.8.1-Backdoor-Command-Execution","title":"JoseLRC97/UnrealIRCd-3.2.8.1-Backdoor-Command-Execution","date":"2024-04-18","url":"https://github.com/JoseLRC97/UnrealIRCd-3.2.8.1-Backdoor-Command-Execution"},{"source":"pocgithub","id":"MFernstrom/OffensivePascal-CVE-2010-2075","title":"MFernstrom/OffensivePascal-CVE-2010-2075","date":"2022-05-28","url":"https://github.com/MFernstrom/OffensivePascal-CVE-2010-2075"},{"source":"pocgithub","id":"Tc-XoNoR/CVE-2010-2075","title":"Tc-XoNoR/CVE-2010-2075","date":"2026-04-16","url":"https://github.com/Tc-XoNoR/CVE-2010-2075"},{"source":"pocgithub","id":"chancej715/UnrealIRCd-3.2.8.1-Backdoor-Command-Execution","title":"chancej715/UnrealIRCd-3.2.8.1-Backdoor-Command-Execution","date":"2023-04-25","url":"https://github.com/chancej715/UnrealIRCd-3.2.8.1-Backdoor-Command-Execution"},{"source":"pocgithub","id":"earthbendergara/unrealircd3.2.8.1-local-exploit","title":"earthbendergara/unrealircd3.2.8.1-local-exploit","date":"2025-11-28","url":"https://github.com/earthbendergara/unrealircd3.2.8.1-local-exploit"},{"source":"pocgithub","id":"mishaqdev/cve-2010-2075-analysis","title":"mishaqdev/cve-2010-2075-analysis","date":"2026-06-05","url":"https://github.com/mishaqdev/cve-2010-2075-analysis"},{"source":"pocgithub","id":"rhimavanth32-max/Metasploitable2-Reconnaissance-and-UnrealIRCd-Backdoor-Exploitation","title":"rhimavanth32-max/Metasploitable2-Reconnaissance-and-UnrealIRCd-Backdoor-Exploitation","date":"2026-09-11","url":"https://github.com/rhimavanth32-max/Metasploitable2-Reconnaissance-and-UnrealIRCd-Backdoor-Exploitation"},{"source":"pocgithub","id":"rushikesh-a-bhujbal/CVE-2010-2075","title":"rushikesh-a-bhujbal/CVE-2010-2075","date":"2026-09-24","url":"https://github.com/rushikesh-a-bhujbal/CVE-2010-2075"},{"source":"pocgithub","id":"zales2004/sunset-noontide-pentesting","title":"zales2004/sunset-noontide-pentesting","date":"2026-09-12","url":"https://github.com/zales2004/sunset-noontide-pentesting"}],"products":[{"vendor":"unrealircd","product":"unrealircd"}],"references":[{"url":"http://www.unrealircd.com/txt/unrealsecadvisory.20100612.txt","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/1437","tags":["vdb-entry","x_refsource_VUPEN","x_transferred","Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-201006-21.xml","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred"]},{"url":"http://osvdb.org/65445","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"]},{"url":"http://www.openwall.com/lists/oss-security/2010/06/14/11","tags":["mailing-list","x_refsource_MLIST","x_transferred"]},{"url":"http://www.exploit-db.com/exploits/13853","tags":["exploit","x_refsource_EXPLOIT-DB","x_transferred"]},{"url":"http://secunia.com/advisories/40169","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory"]},{"url":"http://seclists.org/fulldisclosure/2010/Jun/277","tags":["mailing-list","x_refsource_FULLDISC","x_transferred"]},{"url":"http://www.securityfocus.com/bid/40820","tags":["vdb-entry","x_refsource_BID","x_transferred","Exploit"]},{"url":"http://seclists.org/fulldisclosure/2010/Jun/284","tags":["mailing-list","x_refsource_FULLDISC","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2010-2075"},{"url":"https://github.com/advisories/GHSA-8hfg-rj44-xr2c"}],"sources":{"cve":[{"id":"CVE-2010-2075","description":"UnrealIRCd 3.2.8.1, as distributed on certain mirror sites from November 2009 through June 2010, contains an externally introduced modification (Trojan Horse) in the DEBUG3_DOLOG_SYSTEM macro, which allows remote attackers to execute arbitrary commands.","status":"published","published":"2010-06-15T01:00:00Z","modified":"2024-08-07T02:17:13.638Z","updated_at":"2026-11-02T14:33:27.354104Z"}],"euvd":[{"id":"EUVD-2010-2094","description":"UnrealIRCd 3.2.8.1, as distributed on certain mirror sites from November 2009 through June 2010, contains an externally introduced modification (Trojan Horse) in the DEBUG3_DOLOG_SYSTEM macro, which allows remote attackers to execute arbitrary commands.","status":"published","published":"2010-06-15T01:00:00Z","modified":"2024-08-07T02:17:13Z","updated_at":"2026-11-03T01:39:39.367115Z"}],"ghsa":[{"id":"GHSA-8hfg-rj44-xr2c","title":"UnrealIRCd 3.2.8.1, as distributed on certain mirror sites from November 2009 through June 2010,...","description":"UnrealIRCd 3.2.8.1, as distributed on certain mirror sites from November 2009 through June 2010, contains an externally introduced modification (Trojan Horse) in the DEBUG3_DOLOG_SYSTEM macro, which allows remote attackers to execute arbitrary commands.","status":"published","published":"2022-05-17T05:50:08Z","modified":"2023-01-28T05:05:04Z","cwes":["CWE-20"],"updated_at":"2026-11-02T14:44:17.523008Z"}],"nvd":[{"id":"CVE-2010-2075","description":"UnrealIRCd 3.2.8.1, as distributed on certain mirror sites from November 2009 through June 2010, contains an externally introduced modification (Trojan Horse) in the DEBUG3_DOLOG_SYSTEM macro, which allows remote attackers to execute arbitrary commands.","status":"published","published":"2010-06-15T14:04:26.327Z","modified":"2026-06-16T23:19:56.13Z","cvss":[{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:01:47.724369Z"}]}}