CVE-2001-1056

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

IRC DCC helper in the ip_masq_irc IP masquerading module 2.2 allows remote attackers to bypass intended firewall restrictions by causing the target system to send a "DCC SEND" request to a malicious server which listens on port 6667, which may cause the module to believe that the traffic is a valid request and allow the connection to the port specified in the DCC SEND request.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://archives.neohapsis.com/archives/bugtraq/2001-07/0733.htmlBroken Link
http://archives.neohapsis.com/archives/bugtraq/2001-07/0750.htmlBroken Link
http://www.iss.net/security_center/static/6923.phpBroken Link
http://www.osvdb.org/1916Broken Link
http://www.securityfocus.com/bid/3117Third Party Advisory, Vendor Advisory
http://archives.neohapsis.com/archives/bugtraq/2001-07/0733.htmlBroken Link
http://archives.neohapsis.com/archives/bugtraq/2001-07/0750.htmlBroken Link
http://www.iss.net/security_center/static/6923.phpBroken Link
http://www.osvdb.org/1916Broken Link
http://www.securityfocus.com/bid/3117Third Party Advisory, Vendor Advisory

Timeline

Published: Jul 30, 2001
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2001

CVE-2001-10575.0The License Manager (mathlm) for Mathematica 4.0 and 4.1 allows remote attackers to cause a denial of service (resource exhaustion) by conne CVE-2001-10587.5The License Manager (mathlm) for Mathematica 4.0 and 4.1 allows remote attackers to bypass access control (specified by the -restrict argume CVE-2001-10593.6VMWare creates a temporary file vmware-log.USERNAME with insecure permissions, which allows local users to read or modify license informatio CVE-2001-10607.5phpMyAdmin 2.2.0rc3 and earlier allows remote attackers to execute arbitrary commands by inserting them into (1) the strCopyTableOK argument CVE-2001-106110.0Vulnerability in lsmcode in unknown versions of AIX, possibly related to a usage error.CVE-2001-10627.2Buffer overflow in mana in OpenServer 5.0.6a and earlier allows local users to execute arbitrary code.CVE-2001-10637.2Buffer overflow in uidadmin in Caldera Open Unix 8.0.0 and UnixWare 7 allows local users to gain root privileges via a long -S (scheme) comm CVE-2001-10645.0Cisco 600 series routers running CBOS 2.0.1 through 2.4.2ap allows remote attackers to cause a denial of service via multiple connections to CVE-2001-10655.0Web-based configuration utility in Cisco 600 series routers running CBOS 2.0.1 through 2.4.2ap binds itself to port 80 even when web-based c CVE-2001-10662.1ns6install installation script for Netscape 6.01 on Solaris, and other versions including 6.2.1 beta, allows local users to overwrite arbitr CVE-2001-106710.0Buffer overflow in AOLserver 3.0 allows remote attackers to cause a denial of service, and possibly execute arbitrary code, via an HTTP requ CVE-2001-10685.0qpopper 4.01 with PAM based authentication on Red Hat systems generates different error messages when an invalid username is provided instea