4 matches found
CVE-2004-2553
The CVE-2004-2553 issue affects IgnitionServer ignitionServer 0.1.2 through 0.1.2-R2. A remote authenticated user with local IRC operator privileges can escalate to a global IRC operator by issuing the unofficial umode command with the +ORD argument. This privilege escalation is validated by mult...
CVE-2005-1641
Summary: The Ignition Project ignitionServer vulnerable component is the IRC service’s module mod_channel . Affected version range: ignitionServer 0.3.0 to 0.3.6 (and possibly earlier). Root cause: bug in how protected channels locked by a key are enforced and a broader design/validation issue in...
CVE-2004-2431
Technical details for CVE-2004-2431 are not publicly provided in the supplied documents; affected version range and exploit characteristics remain unspecified. Monitor for official disclosures or updated security advisories.
CVE-2005-1640
The CVE covers a flaw in ignitionServer (The Ignition Project) where mod_channel.bas fails to properly verify that a host has owner privileges before deleting IRC channel access entries. A remote attacker could bypass intended restrictions and, in the worst case, delete the access entries created...