CVE-2005-1640 - mod_channel.bas in The Ignition Project ignitionServer 0.3.0 to 0.3.6, and possibly earlier versions, does not properly verify whether a host has the owner privileges required to delete IRC channel access entries, which allows remote attackers to bypass intended restrictions

Back Back to CVE browser

HIGH

mod_channel.bas in The Ignition Project ignitionServer 0.3.0 to 0.3.6, and possibly earlier versions, does not properly verify whether a host has the owner privileges required to delete IRC channel access entries, which allows remote attackers to bypass intended restrictions

Published May 17, 2005

7.5

HIGH

CVSS 2.0

EPSS 2.48%

Description

mod_channel.bas in The Ignition Project ignitionServer 0.3.0 to 0.3.6, and possibly earlier versions, does not properly verify whether a host has the owner privileges required to delete IRC channel access entries, which allows remote attackers to bypass intended restrictions.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (2)

http://secunia.com/advisories/15388
third-party-advisoryx_refsource_SECUNIAPatch
http://www.ignition-project.com/security/20050414-hosts-delete-owner-access-entries
x_refsource_CONFIRMExploitPatchVendor Advisory

Link	Providers	Tags
http://secunia.com/advisories/15388		third-party-advisoryx_refsource_SECUNIAPatch
http://www.ignition-project.com/security/20050414-hosts-delete-owner-access-entries		x_refsource_CONFIRMExploitPatchVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published May 17, 2005

Updated Aug 7, 2024

Reserved May 17, 2005

Link CVE-2005-1640

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2005-1640

Red Hat

Severity n/a

Public date n/a

Links CVE-2005-1640