Unreal3.2.8.1.tar.gz IRCD contain a backdoor

by Thinker Email

Link: http://forums.unrealircd.com/viewtopic.php?t=6562

Security alert.

Some versions of Unreal3.2.8.1.tar.gz contain a backdoor


How to check if you're running the backdoored version
======================================================
Two ways:

One is to check if the Unreal3.2.8.1.tar.gz you have is good or bad by running:

$ md5sum Unreal3.2.8.1.tar.gz


Backdoored version (BAD) is: 752e46f2d873c1679fa99de3f52a274d
Official version (GOOD) is: 7b741e94e867c0a7370553fd01506c66

The other way is to run this command in your Unreal3.2 directory:


$ grep DEBUG3_DOLOG_SYSTEM include/struct.h


If it outputs two lines, then you're running the backdoored/trojanized version.
If it outputs nothing, then you're safe and there's nothing to do.