What is CVE-2010-2075?

CVE-2010-2075 is a vulnerability in Unrealircd, classified under Improper Input Validation. Published 2010-06-15.

Is CVE-2010-2075 known to be exploited?

61 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Improper input validation in Unrealircd

CVE-2010-2075

UnrealIRCd 3.2.8.1, as distributed on certain mirror sites from November 2009 through June 2010, contains an externally introduced modification (Trojan Horse) in the DEBUG3_DOLOG_SYSTEM macro, which allows remote attackers to execute arbit…

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

EPSS: 0.872 (99.5th percentile) — read the EPSS interpretation.

Affected products

Unrealircd — versions 3.2.8.1
N/a — versions n/a

Weakness classification (CWE)

CWE-20 — Improper Input Validation

Public proof-of-concept exploits

References

secalert@redhat.com (x_refsource_CONFIRM, Vendor Advisory)
ADV-2010-1437 (vdb-entry, x_refsource_VUPEN, Vendor Advisory)
GLSA-201006-21 (vendor-advisory, x_refsource_GENTOO)
65445 (x_refsource_OSVDB, vdb-entry)
[oss-security] 20100614 Re: CVE request: UnrealIRCd 3.2.8.1 source code contained a backdoor allowing for remote command execution (mailing-list, x_refsource_MLIST)
13853 (exploit, x_refsource_EXPLOIT-DB)
40169 (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
20100612 Fw: [irc-security] UnrealIRCd 3.2.8.1 backdoored on official ftp and site (mailing-list, x_refsource_FULLDISC)
40820 (Exploit, vdb-entry, x_refsource_BID)
20100612 Re: Fw: [irc-security] UnrealIRCd 3.2.8.1 backdoored on official ftp and site (mailing-list, x_refsource_FULLDISC)

Frequently asked questions

What is CVE-2010-2075?: CVE-2010-2075 is a vulnerability in Unrealircd, classified under Improper Input Validation. Published 2010-06-15.
Is CVE-2010-2075 known to be exploited?: 61 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.