CVE-2007-4409: Universal Ircd Ircu

Medium severity, CVSS 5.1. EPSS: 1.3% chance of exploitation in the next 30 days.

Race condition in ircu 2.10.12.01 through 2.10.12.05 allows remote attackers to set a new Apass during a netburst by arranging for ops privilege to be granted before the mode arrives.

Affected products

• Universal Ircd Ircu: version 2.10.12.01 only; version 2.10.12.02 only; version 2.10.12.03 only; version 2.10.12.04 only; version 2.10.12.05 only

Published 2007-08-18. Last modified 2026-06-16.