NetSight
high7.5

CVE-2005-1640

mod_channel.bas in The Ignition Project ignitionServer 0.3.0 to 0.3.6, and possibly earlier versions, does not properly verify whether a host has the owner pri…

Impact

mod_channel.bas in The Ignition Project ignitionServer 0.3.0 to 0.3.6, and possibly earlier versions, does not properly verify whether a host has the owner privileges required to delete IRC channel access entries, which allows remote attackers to bypass intended restrictions.

Affected products

VendorProductAffected versions
The Ignition ProjectIgnitionserver
Versions 0.3.0, 0.3.1, 0.3.2, 0.3.3, 0.3.4, 0.3.5

References