mishaqdev/cve-2010-2075-analysisTechnical writeup and penetration testing report for CVE-2010-2075, demonstrating UnrealIRCd backdoor exploitation and remediation.
This repository documents the analysis and exploitation of CVE-2010-2075, a backdoor vulnerability affecting UnrealIRCd 3.2.8.1.
The vulnerability was reproduced in a controlled laboratory environment using Metasploitable 2 as the target machine and Parrot OS as the attacking system. The objective was to identify the vulnerable service, verify the presence of the backdoor, and demonstrate the impact of successful exploitation.
| Field | Value |
|---|---|
| CVE ID | CVE-2010-2075 |
| Software | UnrealIRCd 3.2.8.1 |
| Service Port | 6667/TCP |
| Vulnerability Type | Backdoor Remote Code Execution |
| Severity | High |
| Target Platform | Metasploitable 2 |
The assessment began with network reconnaissance to identify active services running on the target system.
Service enumeration revealed that UnrealIRCd was listening on port 6667. Further investigation confirmed the presence of the vulnerable UnrealIRCd 3.2.8.1 version associated with CVE-2010-2075.
After confirming the vulnerable service, the corresponding exploit module was used to validate the vulnerability.
Successful exploitation resulted in remote command execution on the target machine, demonstrating complete compromise of the affected service.
A successful attacker can:
The complete technical report, screenshots, evidence, and testing methodology can be found in:
This project was conducted in an isolated laboratory environment for educational and authorized security research purposes only.
