Anope Bug Tracker

View Revisions: Issue #1079 All Revisions ] Back to Issue ]
Summary 0001079: ip disclosure with /cs ban
Revision 2010-12-13 18:43 by Adam
Description [Working in >1.8]
Hi guys,
just found a bug, in the anope core wich leads to get the ip of a poor user.
The main concept is to set
/mode #channel +eeeeeeee @a* @b* @c* @d* ... @z*
than
/cs ban #channel User
and if the user has a resolved host, than is in except and you'll get a notice like:
[ChanServ] User matches an except on #tests and cannot be banned until the except have been removed.
so you try removing @a* and see if you keep getting the notice, than @b* than @c*
until you ban the user... well that's the first char of the host of the user (or of the vhost... but if you do it with attention you will not do mistakes.

bye

P.S. this bug should also work with other commands like /cs akick, but i didn' tried.
Revision 2010-09-12 09:54 by Adam
Description [Working in >1.8]
Hi guys,
just found a bug, in the anope core wich leads to get the ip of a poor user.
The main concept is to set
/mode #channel +eeeeeeee @a* @b* @c* @d* ... @z*
than
/cs ban #channel User
and if the user has a resolved host, than is in except and you'll get a notice like:
[ChanServ] User matches an except on #tests and cannot be banned until the except have been removed.
so you try removing @a* and see if you keep getting the notice, than @b* than @c*
until you ban the user... well that's the first char of the host of the user (or of the vhost... but if you do it with attention you will not do mistakes.

bye

P.S. this bug should also work with other commands like /cs akick, but i didn' tried.


Copyright © 2000 - 2019 MantisBT Team
Powered by Mantis Bugtracker