Advisory by j0k3r and Eraser /############################################################\ # Product: Unreal3.1.1 - Unreal3.2-Selene[beta9]-rus # # Vulnerability: users killing # # Program Authors: www.unrealircd.com, www.dal.net.ru # # Danger: high # # Date: 05.07.02 # \############################################################/ ---Description--- In linked irc networks, based on Unreal3.2-rus.b(DalNet(RU) edition), anybody can kill another user with any privilegies. Unreal3.2-rus.b (DalNet(RU) edition) supports Russian and English nicks. Connect to network, linked with Unreal based network, type '/nick victim', and substitute any English letter with one Russian letter in victim's nick. Victim and attacker will be killed with msg "(Killed (irc.some_linked_network.ru (Nick Collision))". Unreal3.2-Selene[beta9]-rus - is the most frequently used server in Russia. ---Vulnerable--- Unreal3.1.1 Unreal3.2-Selene[beta9]-rus ---Programm authors--- Authors have been informed about the bug! ---Bug finders, contacts--- Eraser - er4s3r@mail.ru - epacep@inbox.ru - www.epacep.com. j0k3r - j0k3r@mail.ru - www.dhgroup.org [Damage Hacking Group].