mod_channel.bas in The Ignition Project ignitionServer 0.3.0 to 0.3.6, and possibly earlier versions, does not properly verify whether a host has the owner privileges required to delete IRC channel access entries, which allows remote attackers to bypass intended restrictions.
References
Link | Resource |
---|---|
http://www.ignition-project.com/security/20050414-hosts-delete-owner-access-entries | Exploit Patch Vendor Advisory |
http://secunia.com/advisories/15388 | Patch |
Configurations
Configuration 1 (hide)
|
Information
Published : 2005-05-16 21:00
Updated : 2008-09-05 13:49
NVD link : CVE-2005-1640
Mitre link : CVE-2005-1640
JSON object : View
CWE
Products Affected
the_ignition_project
- ignitionserver