20 matches found
CVE-2004-2553
The CVE-2004-2553 issue affects IgnitionServer ignitionServer 0.1.2 through 0.1.2-R2. A remote authenticated user with local IRC operator privileges can escalate to a global IRC operator by issuing the unofficial umode command with the +ORD argument. This privilege escalation is validated by mult...
CVE-2004-2553
The Ignition Project ignitionServer 0.1.2 through 0.1.2-R2 allows remote authenticated users with local IRC operator privileges to obtain global IRC operator privileges by using the unofficial umode command with the +ORD argument...
IgnitionServer IIRC Operator Privilege Escalation Vulnerability
IgnitionServer IRC service may be vulnerable to a flaw that let an remote attacker to gain elevated privileges on the system. SPDX-FileCopyrightText: 2004 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
IgnitionServer Irc operator privilege escalation vulnerability
The remote host is running a version of the IgnitionServer IRC service which may be vulnerable to a flaw that let remote attacker to gain elevated privileges on the system. A remote attacker, who is an operator, can supply an unofficial command to the server to obtain elevated privileges and beco...
CVE-2004-2431
Technical details for CVE-2004-2431 are not publicly provided in the supplied documents; affected version range and exploit characteristics remain unspecified. Monitor for official disclosures or updated security advisories.
CVE-2004-2431
Unknown vulnerability in The Ignition Project ignitionServer 0.1.2 through 0.3.1, with the linking service enabled, allows remote attackers to bypass authentication...
ignitionServer IRCX (Extended Internet Relay Chat) server multiple vulnerabilities
It's possible to delete access control entries. Operator can not access channel locked by user...
[SA15388] ignitionServer Access Entry Deletion and Channel Locking Vulnerabilities
---------------------------------------------------------------------- Want a new IT Security job? Vacant positions at Secunia: http://secunia.com/secuniavacancies/ ---------------------------------------------------------------------- TITLE: ignitionServer Access Entry Deletion and Channel Locki...
CVE-2005-1641
modchannel in The Ignition Project ignitionServer 0.3.0 to 0.3.6, and possibly earlier versions, does not allow protected operators to access channels that have been locked out by a key, which allows IRC users to cause a denial of service...
CVE-2005-1640
The CVE covers a flaw in ignitionServer (The Ignition Project) where mod_channel.bas fails to properly verify that a host has owner privileges before deleting IRC channel access entries. A remote attacker could bypass intended restrictions and, in the worst case, delete the access entries created...
CVE-2005-1641
Summary: The Ignition Project ignitionServer vulnerable component is the IRC service’s module mod_channel . Affected version range: ignitionServer 0.3.0 to 0.3.6 (and possibly earlier). Root cause: bug in how protected channels locked by a key are enforced and a broader design/validation issue in...
CVE-2005-1640
modchannel.bas in The Ignition Project ignitionServer 0.3.0 to 0.3.6, and possibly earlier versions, does not properly verify whether a host has the owner privileges required to delete IRC channel access entries, which allows remote attackers to bypass intended restrictions...
CVE-2005-1640
modchannel.bas in The Ignition Project ignitionServer 0.3.0 to 0.3.6, and possibly earlier versions, does not properly verify whether a host has the owner privileges required to delete IRC channel access entries, which allows remote attackers to bypass intended restrictions...
CVE-2005-1641
modchannel in The Ignition Project ignitionServer 0.3.0 to 0.3.6, and possibly earlier versions, does not allow protected operators to access channels that have been locked out by a key, which allows IRC users to cause a denial of service...
ignitionServer < 0.3.6p1 Channel Locking Remote DoS
Binary data 2919.prm...
ignitionServer < 0.3.6-P1 Multiple Vulnerabilities
The remote host is running a version of the IgnitionServer IRC service which contains a bug in the way it handles locked channels, as well as a design error regarding the access validation checks. An attacker may use this flaw to block an IRC operator out of a protected channel. A host may use th...
[SA12374] ignitionServer "SERVER" Denial of Service Vulnerability
TITLE: ignitionServer "SERVER" Denial of Service Vulnerability SECUNIA ADVISORY ID: SA12374 VERIFY ADVISORY: http://secunia.com/advisories/12374/ CRITICAL: Less critical IMPACT: DoS WHERE: From remote SOFTWARE: ignitionServer 0.3.x http://secunia.com/product/3565/ ignitionServer 0.2.x...
ignitionServer umode Command Global Operator Privilege Escalation
The remote host is running a version of the IgnitionServer IRC service which might be vulnerable to a flaw that lets a remote attacker gain elevated privileges on the system. A local IRC operator can supply an unofficial command to the server to obtain elevated privileges and become a global IRC...
ignitionServer SERVER Command Spoofed Server Saturation DoS
The remote host is running a version of the IgnitionServer IRC service that could be vulnerable to a denial of service in the SERVER command. An attacker could crash the remote host by misusing the SERVER command repeatdly. C Tenable Network Security, Inc. include"compat.inc"; ifdescription...
[NT] ignitionServer Server Linking Password Verification Vulnerability
The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...