View Issue Details
| ID | Project | Category | View Status | Date Submitted | Last Update |
|---|---|---|---|---|---|
| 0002249 | unreal | ircd | public | 2004-12-21 11:14 | 2004-12-21 11:30 |
| Reporter | Darth Android | Assigned To | |||
| Priority | normal | Severity | minor | Reproducibility | always |
| Status | closed | Resolution | open | ||
| Product Version | 3.2.2 | ||||
| Summary | 0002249: ##channels not showing in /list | ||||
| Description | This is a fairly serious security exploit that i have noticed in Unreal. While it can be stopped temorarily, i feel it needs to be fixed in the IRCd. If you create a channel that begins with a double hash (##), then the channel will not show in a /list regardless of flags (net admin, etc.). A simple fix is to do a deny-channel for "##*" but this needs to be corrected as it is often used by spammers to join many bots to a channel that cannot be seen by opers. | ||||
| Steps To Reproduce | Join any chanel beginning with a double hash, i.e. '/join ##test' then do a channel list '/list' note that "##test" doesn't show in the channel list | ||||
| 3rd party modules | |||||
|
|
The IRCd does not hide such channels at all, it's your client (now don't ask me why some clients have such a stupid default setting :P). http://www.vulnscan.org/UnrealIrcd/faq/#43 |
| Date Modified | Username | Field | Change |
|---|---|---|---|
| 2004-12-21 11:14 | Darth Android | New Issue | |
| 2004-12-21 11:30 | syzop | Status | new => closed |
| 2004-12-21 11:30 | syzop | Note Added: 0008653 |
