PT-2005-2618 · Ignition · Ignitionserver

Publicado 2005-05-17 · Atualizado 2008-09-05 · CVE-2005-1641

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions The Ignition Project ignitionServer versions 0.3.0 through 0.3.6

Description The mod channel module in the affected software does not properly restrict access to locked-out channels for protected operators, allowing IRC users to cause a denial of service.

Recommendations For versions 0.3.0 through 0.3.6, consider restricting access to the mod channel module until a proper fix is applied to prevent protected operators from accessing locked-out channels.

Exploit

Correção

Identificadores relacionados

CVE-2005-1641

Produtos afetados

Ignitionserver

Referências · 3

• 🔥 http://ignition-project.com/security/20050515-protected-opers-cannot-join-channel-with-key · Exploit
• http://secunia.com/advisories/15388 · Correção
• https://nvd.nist.gov/vuln/detail/CVE-2005-1641 · Nota de Segurança