CVE-2007-4406: Universal Ircd Ircu

High severity, CVSS 7.5. EPSS: 1.5% chance of exploitation in the next 30 days.

ircu 2.10.12.01 through 2.10.12.04 does not remove ops privilege after a join from a server with an older timestamp (TS), which allows remote attackers to gain control of a channel during a split.

Affected products

• Universal Ircd Ircu: version 2.10.12.01 only; version 2.10.12.02 only; version 2.10.12.03 only; version 2.10.12.04 only

Published 2007-08-18. Last modified 2026-06-16.