CVE-2007-4406

Publication date 18 August 2007

Last updated 17 July 2025

Ubuntu priority

Description

ircu 2.10.12.01 through 2.10.12.04 does not remove ops privilege after a join from a server with an older timestamp (TS), which allows remote attackers to gain control of a channel during a split.

Read the notes from the security team

Status

Show unmaintained releases

Package	Ubuntu Release	Status
ircd-ircu	7.10 gutsy	Not affected
	7.04 feisty	Not affected
	6.10 edgy	Not affected
	6.06 LTS dapper	Not affected

How can I get the fixes?
What do statuses mean?

Notes

fujitsu

Only affects >= 2.10.12.01.

References

MITRE
NVD
Launchpad
Debian

Other references

https://www.cve.org/CVERecord?id=CVE-2007-4406