CVE-2004-0679: Unreal Unrealircd

Medium severity, CVSS 5.0. EPSS: 1.6% chance of exploitation in the next 30 days.

The IP cloaking feature (cloak.c) in UnrealIRCd 3.2, and possibly other versions, uses a weak hashing scheme to hide IP addresses, which could allow remote attackers to use brute force methods to gain other user's IP addresses.

Affected products

• Unreal Unrealircd: version 3.1.1 only; version 3.1.3 only; version 3.2 only; version 3.2_.0_beta_10 only

Published 2004-08-06. Last modified 2026-06-16.