CVE-2004-2553

The CVE-2004-2553 issue affects IgnitionServer ignitionServer 0.1.2 through 0.1.2-R2. A remote authenticated user with local IRC operator privileges can escalate to a global IRC operator by issuing the unofficial umode command with the +ORD argument. This privilege escalation is validated by mult...

CVE-2004-2553

The Ignition Project ignitionServer 0.1.2 through 0.1.2-R2 allows remote authenticated users with local IRC operator privileges to obtain global IRC operator privileges by using the unofficial umode command with the +ORD argument...

CVE-2004-2553: Undefined Security Weakness

The Ignition Project ignitionServer 0.1.2 through 0.1.2-R2 allows remote authenticated users with local IRC operator privileges to obtain global IRC operator privileges by using the unofficial umode command with the +ORD argument...

IgnitionServer Irc operator privilege escalation vulnerability

The remote host is running a version of the IgnitionServer IRC service which may be vulnerable to a flaw that let remote attacker to gain elevated privileges on the system. A remote attacker, who is an operator, can supply an unofficial command to the server to obtain elevated privileges and beco...

IgnitionServer IIRC Operator Privilege Escalation Vulnerability

IgnitionServer IRC service may be vulnerable to a flaw that let an remote attacker to gain elevated privileges on the system. SPDX-FileCopyrightText: 2004 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

CVE-2004-2431

Technical details for CVE-2004-2431 are not publicly provided in the supplied documents; affected version range and exploit characteristics remain unspecified. Monitor for official disclosures or updated security advisories.

CVE-2004-2431

Unknown vulnerability in The Ignition Project ignitionServer 0.1.2 through 0.3.1, with the linking service enabled, allows remote attackers to bypass authentication...

CVE-2004-2431: Undefined Security Weakness

Unknown vulnerability in The Ignition Project ignitionServer 0.1.2 through 0.3.1, with the linking service enabled, allows remote attackers to bypass authentication...

ignitionServer IRCX (Extended Internet Relay Chat) server multiple vulnerabilities

It's possible to delete access control entries. Operator can not access channel locked by user...

[SA15388] ignitionServer Access Entry Deletion and Channel Locking Vulnerabilities

---------------------------------------------------------------------- Want a new IT Security job? Vacant positions at Secunia: http://secunia.com/secuniavacancies/ ---------------------------------------------------------------------- TITLE: ignitionServer Access Entry Deletion and Channel Locki...

CVE-2005-1641

Summary: The Ignition Project ignitionServer vulnerable component is the IRC service’s module mod_channel . Affected version range: ignitionServer 0.3.0 to 0.3.6 (and possibly earlier). Root cause: bug in how protected channels locked by a key are enforced and a broader design/validation issue in...

CVE-2005-1640

modchannel.bas in The Ignition Project ignitionServer 0.3.0 to 0.3.6, and possibly earlier versions, does not properly verify whether a host has the owner privileges required to delete IRC channel access entries, which allows remote attackers to bypass intended restrictions...

CVE-2005-1641

modchannel in The Ignition Project ignitionServer 0.3.0 to 0.3.6, and possibly earlier versions, does not allow protected operators to access channels that have been locked out by a key, which allows IRC users to cause a denial of service...

CVE-2005-1640

modchannel.bas in The Ignition Project ignitionServer 0.3.0 to 0.3.6, and possibly earlier versions, does not properly verify whether a host has the owner privileges required to delete IRC channel access entries, which allows remote attackers to bypass intended restrictions...

CVE-2005-1640

The CVE covers a flaw in ignitionServer (The Ignition Project) where mod_channel.bas fails to properly verify that a host has owner privileges before deleting IRC channel access entries. A remote attacker could bypass intended restrictions and, in the worst case, delete the access entries created...

CVE-2005-1641

modchannel in The Ignition Project ignitionServer 0.3.0 to 0.3.6, and possibly earlier versions, does not allow protected operators to access channels that have been locked out by a key, which allows IRC users to cause a denial of service...

CVE-2005-1640: Undefined Security Weakness

modchannel.bas in The Ignition Project ignitionServer 0.3.0 to 0.3.6, and possibly earlier versions, does not properly verify whether a host has the owner privileges required to delete IRC channel access entries, which allows remote attackers to bypass intended restrictions...

ignitionServer < 0.3.6p1 Channel Locking Remote DoS

Binary data 2919.prm...

CVE-2005-1641: Undefined Security Weakness

modchannel in The Ignition Project ignitionServer 0.3.0 to 0.3.6, and possibly earlier versions, does not allow protected operators to access channels that have been locked out by a key, which allows IRC users to cause a denial of service...

ignitionServer < 0.3.6-P1 Multiple Vulnerabilities

The remote host is running a version of the IgnitionServer IRC service which contains a bug in the way it handles locked channels, as well as a design error regarding the access validation checks. An attacker may use this flaw to block an IRC operator out of a protected channel. A host may use th...