View Issue Details
| ID | Project | Category | View Status | Date Submitted | Last Update |
|---|---|---|---|---|---|
| 0003211 | unreal | ircd | public | 2007-01-25 12:17 | 2007-01-25 13:14 |
| Reporter | Jobe | Assigned To | |||
| Priority | normal | Severity | major | Reproducibility | always |
| Status | closed | Resolution | no change required | ||
| Product Version | 3.2.6 | ||||
| Summary | 0003211: Server Crash on WHO from another server | ||||
| Description | I think the Summary says it all but ill re-itterate. If an Unreal server recieves a message consisting of "WHO" or its token " the server literally crashes. Was told by one of the Anope devs that the problem was linked back to it calling some function to find out which users were in the same channel as if the link as if the link was a user connection. | ||||
| 3rd party modules | |||||
| has duplicate | 0003688 | closed | The IRCd crashes on "WHO" command. |
|
|
On an additional note i know WHO is not meant to be sent from server to server but it could potentially be abused to crash an uplink server. |
|
|
http://www.vulnscan.org/UnrealIRCd/faq/104 WHO is not a server command, indeed. |
| Date Modified | Username | Field | Change |
|---|---|---|---|
| 2007-01-25 12:17 | Jobe | New Issue | |
| 2007-01-25 12:19 | Jobe | Note Added: 0013111 | |
| 2007-01-25 13:14 | syzop | Status | new => closed |
| 2007-01-25 13:14 | syzop | Note Added: 0013112 | |
| 2007-01-25 13:14 | syzop | Resolution | open => no change required |
| 2008-05-01 14:01 | Stealth | Relationship added | related to 0003688 |
| 2008-05-01 14:02 | Stealth | Relationship deleted | related to 0003688 |
| 2008-05-01 14:02 | Stealth | Relationship added | has duplicate 0003688 |