View Issue Details

IDProjectCategoryView StatusLast Update
0003211unrealircdpublic2007-01-25 13:14
ReporterJobe Assigned To 
PrioritynormalSeveritymajorReproducibilityalways
Status closedResolutionno change required 
Product Version3.2.6 
Summary0003211: Server Crash on WHO from another server
DescriptionI think the Summary says it all but ill re-itterate. If an Unreal server recieves a message consisting of "WHO" or its token " the server literally crashes. Was told by one of the Anope devs that the problem was linked back to it calling some function to find out which users were in the same channel as if the link as if the link was a user connection.
3rd party modules

Relationships

has duplicate 0003688 closed The IRCd crashes on "WHO" command. 

Activities

Jobe

2007-01-25 12:19

reporter   ~0013111

On an additional note i know WHO is not meant to be sent from server to server but it could potentially be abused to crash an uplink server.

syzop

2007-01-25 13:14

administrator   ~0013112

http://www.vulnscan.org/UnrealIRCd/faq/104

WHO is not a server command, indeed.

Issue History

Date Modified Username Field Change
2007-01-25 12:17 Jobe New Issue
2007-01-25 12:19 Jobe Note Added: 0013111
2007-01-25 13:14 syzop Status new => closed
2007-01-25 13:14 syzop Note Added: 0013112
2007-01-25 13:14 syzop Resolution open => no change required
2008-05-01 14:01 Stealth Relationship added related to 0003688
2008-05-01 14:02 Stealth Relationship deleted related to 0003688
2008-05-01 14:02 Stealth Relationship added has duplicate 0003688