CVEvulnerability

CVE-2001-1488

5.0 MEDIUM Published 2001-12-31 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2001-12-31
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:P/A:N

Description

Open Projects Network Internet Relay Chat (IRC) daemon u2.10.05.18 does not perform a double-reverse DNS lookup, which allows remote attackers to spoof any valid hostname on the Internet. NOTE: a followup post suggests that this is not an issue in the daemon.

Affected configurations

• open projects network open projects network ircd u2.10.05.18

Related

Referenced by CWE · observed example (1)

  • CWE-350 Reliance on Reverse DNS Resolution for a Security-Critical Action weakness

References