[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Message-ID: <4C16C443.1030002@kernel.sg>
Date: Tue, 15 Jun 2010 08:07:31 +0800
From: Eugene Teo <eugeneteo@...nel.sg>
To: oss-security@...ts.openwall.com
CC: Alex Legler <a3li@...too.org>
Subject: Re: CVE request: UnrealIRCd 3.2.8.1 source code contained
a backdoor allowing for remote command execution
On 06/13/2010 01:10 AM, Alex Legler wrote:
> Hi.
>
> Quoting http://www.unrealircd.com/txt/unrealsecadvisory.20100612.txt:
>
> "We found out that the Unreal3.2.8.1.tar.gz file on our mirrors has been
> replaced quite a while ago with a version with a backdoor (trojan) in
> it. This backdoor allows a person to execute ANY command with the
> privileges of the user running the ircd. The backdoor can be executed
> regardless of any user restrictions (so even if you have passworded
> server or hub that doesn't allow any users in)."
>
> Basically, a system() call was injected into the source code, disguised
> as a debug/log macro.
Also see, http://seclists.org/dailydave/2010/q2/56
Eugene
--
main(i) { putchar(182623909 >> (i-1) * 5&31|!!(i<7)<<6) && main(++i); }
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
