[IRCServices] BUG: Linking Services Nicknames..

[M. van Cuijk]

Hi,

Just try it before asking ;)

21:56:37 <mark> LINK ChanServ
21:56:37 -NickServ(services at irc.phedny.net)- Nickname ChanServ may not 
be linked.

So to me it seems alright, untill trying some more:

21:57:12 <mark> LINK OperServ
21:57:12 -NickServ(services at irc.phedny.net)- Nickname OperServ may not 
be linked.
21:57:14 <mark> LINK StatServ
21:57:14 -NickServ(services at irc.phedny.net)- Nickname StatServ has been 
linked to your nickname.
21:57:30 <mark> LINK Global
21:57:30 -NickServ(services at irc.phedny.net)- Nickname Global has been 
linked to your nickname.
21:57:35 <mark> LINK NickServ
21:57:35 -NickServ(services at irc.phedny.net)- Nickname NickServ may not 
be linked.
21:57:42 <mark> LINK MemoServ
21:57:42 -NickServ(services at irc.phedny.net)- Nickname MemoServ may not 
be linked.

It seems that StatServ and Global are not protected. In what degree is 
this a security issue? I don't seem to be able to use GHOST or RECOVER.
Anyway it would be good to fix this anyway...

- Mark

Craig Edwards wrote:

>nickserv only checks the value of s_NickServ when you attempt to link a nick. therefore it only forbids its own nickname being linked. As far as services is concerned its own set of nicks 'dont exist' in the user structs. This means that you could link ChanServs nick, if it isnt sqlined right?
>
>  
>
>>>It appears that you can /ns link nicknames which are not sqlined, conciquently, if you dont use the standard *Serv format, its easy to link nicknames like ChanProtect, or NetStats, where they are chanserv and statserv respectivly..
>>>      
>>>
>>    No, you can't.  Services checks against the current nickname in use,
>>not any predefined patterns like *Serv.  (This does mean that if you change
>>the nickname you need to check ahead of time whether it's in use or not,
>>but that ought to be obvious.)
>>
>> --Andrew Church
>>   achurch at achurch.org
>>   http://achurch.org/
>>
>>------------------------------------------------------------------
>>To unsubscribe or change your subscription options, visit:
>>http://www.ircservices.za.net/mailman/listinfo/ircservices
>>
>>    
>>
>
>
>------------------------------------------------------------------
>To unsubscribe or change your subscription options, visit:
>http://www.ircservices.za.net/mailman/listinfo/ircservices
>
>  
>