CVE-2010-2075

UnrealIRCd 3.2.8.1, as distributed on certain mirror sites from November 2009 through June 2010, contains an externally introduced modification (Trojan Horse) in the DEBUG3_DOLOG_SYSTEM macro, which allows remote attackers to execute arbitrary commands.

CVSS v2.0

7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

83.53% chance of exploitation in the next 30 days, 100th percentile

Published

2010-06-15

Updated

2024-08-07

Proof-of-concept exploits (12)

• http://www.exploit-db.com/exploits/13853
• FredBrave/CVE-2010-2075-UnrealIRCd-3.2.8.11★ · 2023-05-31
• Glumgam/UnrealiRCd-3.2.8.1-exploit-python0★ · 2020-04-19
• IvanEFibiger/LaboratorioHackingEtico0★ · 2025-08-14
• MFernstrom/OffensivePascal-CVE-2010-20752★ · 2022-05-29
• Sh4dowX404/UnrealIRCD-3.2.8.1-Backdoor0★ · 2024-01-25
• adamssamson/Penetration-Testing-of-UnrealIRCd-3.2.8.1-on-Metasploitable-20★ · 2025-09-06
• chancej715/UnrealIRCd-3.2.8.1-Backdoor-Command-Execution0★ · 2023-04-25
• djbender7/cybersecurity-labs0★ · 2025-05-18
• kevinpdicks/UnrealIRCD-3.2.8.1-RCE1★ · 2024-03-28
• Tc-XoNoR/CVE-2010-2075
• earthbendergara/unrealircd3.2.8.1-local-exploit

Metasploit modules (1)

• rapid7/metasploit-framework/blob/master/modules/exploits/unix/irc/unreal_ircd_3281_backdo…

ExploitDB entries (2)

• https://www.exploit-db.com/exploits/16922
• https://www.exploit-db.com/exploits/13853

References

• CVE Record
• NVD entry

Related

• CVE-2015-6967
• CVE-2017-5638
• CVE-2019-16278
• CVE-2021-32305
• CVE-2022-46169
• CVE-2011-2523