View Issue Details

IDProjectCategoryView StatusLast Update
0001079Anope Stable (1.8.x series)ChanServpublic2010-12-24 00:02
Reporterraff7 Assigned Toqa@anope.org  
PrioritynormalSeveritymajorReproducibilityalways
Status resolvedResolutionfixed 
PlatformOtherOSLinux 
Product VersionGIT (include a /version response in report) 
Summary0001079: ip disclosure with /cs ban
Description[Working in >1.8]
Hi guys,
just found a bug, in the anope core wich leads to get the ip of a poor user.
The main concept is to set
/mode #channel +eeeeeeee @a* @b* @c* @d* ... @z*
than
/cs ban #channel User
and if the user has a resolved host, than is in except and you'll get a notice like:
[ChanServ] User matches an except on #tests and cannot be banned until the except have been removed.
so you try removing @a* and see if you keep getting the notice, than @b* than @c*
until you ban the user... well that's the first char of the host of the user (or of the vhost... but if you do it with attention you will not do mistakes.

bye

P.S. this bug should also work with other commands like /cs akick, but i didn' tried.
TagsNo tags attached.

Activities

Adam

2010-12-24 00:02

administrator   ~0005697

Also fixed in 1.8 in commit 12b0ff0593cc5f2c0f61ca575f9e0af8b0084994.

Adam

2010-12-13 23:42

administrator   ~0005682

This has been fixed in 1.9 in commit 49d3c97b677f319460146803004066dfd3d19089

chaz

2010-09-12 09:54

administrator   ~0005554

Issues marked as resolved for a period of time without argument will be closed.

Issue History

Date Modified Username Field Change
2009-06-02 15:30 chaz CC => chaz
2009-06-02 15:36 Amanda CC => Amanda
2009-06-07 23:52 Viper CC => Viper
2009-06-12 01:53 Amanda Status UNCONFIRMED => NEW
2009-06-12 01:53 Amanda Ever Confirmed 0 => 1
2009-06-12 02:01 Adam Status NEW => RESOLVED
2009-06-12 02:01 Adam CC => Adam
2009-06-12 02:01 Adam Resolution => WONTFIX
2010-09-12 09:54 chaz Note Added: 0005554
2010-09-12 09:54 chaz Status resolved => closed
2010-12-13 18:43 Adam Status closed => confirmed
2010-12-13 18:43 Adam Resolution won't fix => reopened
2010-12-13 18:43 Adam Product Version 1.8.0 => GIT (include a /version response in report)
2010-12-13 18:43 Adam Fixed in Version --- =>
2010-12-13 18:43 Adam Description Updated View Revisions
2010-12-13 23:42 Adam Note Added: 0005682
2010-12-13 23:42 Adam Status confirmed => resolved
2010-12-13 23:42 Adam Resolution reopened => fixed
2010-12-24 00:02 Adam Note Added: 0005697