CVE-2004-0679: The IP cloaking feature (cloak.c) in UnrealIRCd 3.2, and possibly other versions, uses a weak hashing schem...

Security readout for executives and security teams

UnrealIRCd’s IP cloaking feature was reported to hide user IP addresses with a weak hashing approach. A remote attacker might brute force cloaked values to recover real user IPs. This is a privacy and exposure issue, not a documented code-execution flaw in the provided sources. Exposure is limited to IRC servers running UnrealIRCd 3.2 or possibly related versions with IP cloaking enabled. The bundle does not provide reliable CPEs, a complete affected-version range, or deployment conditions beyond the cloaking feature. Prioritize if the organization runs public or sensitive IRC services where user IP privacy matters. Business urgency is lower than remote code execution, but higher where IP disclosure could expose staff, customers, or protected communities. Mitigation focus: Check UnrealIRCd vendor guidance for affected and fixed versions.; Upgrade or replace affected UnrealIRCd versions if vendor guidance identifies a safe release.; Do not rely on IP cloaking as a privacy control until verified fixed..

Prepared

Jun 30, 2026, 04:50 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.