View Issue Details

IDProjectCategoryView StatusLast Update
0004944unrealircdpublic2017-08-25 20:37
Reportersyzop Assigned Tosyzop  
PrioritynormalSeverityminorReproducibilityhave not tried
Status resolvedResolutionfixed 
Product Version4.0.11 
Target Version4.0.12Fixed in Version4.0.14 
Summary0004944: Servername in link block is not verified
DescriptionIf you have something like:
link xxxx {

And this link connects (outgoing, anyway) then the server can introduce himself as yyyy. It seems the name is not checked.

Not a security issue as far as I can see, but it can certainly be confusing.

A side-effect of this is that if this is an autoconnect link then UnrealIRCd will keep trying to connect to the server every connfreq. This instead of the regular and expected behavior of "don't try to link, if we are already linked" (when the names ARE correct)
TagsNo tags attached.
3rd party modules

Issue History

Date Modified Username Field Change
2017-05-03 11:28 syzop New Issue
2017-08-25 20:36 syzop View Status private => public
2017-08-25 20:37 syzop Assigned To => syzop
2017-08-25 20:37 syzop Status new => resolved
2017-08-25 20:37 syzop Resolution open => fixed
2017-08-25 20:37 syzop Fixed in Version => 4.0.14
2017-08-25 20:37 syzop Note Added: 0019836