PT-2005-2618 · Ignition · Ignitionserver

Published 2005-05-17 · Updated 2008-09-05 · CVE-2005-1641

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions The Ignition Project ignitionServer versions 0.3.0 through 0.3.6

Description The mod channel module in the affected software does not properly restrict access to locked-out channels for protected operators, allowing IRC users to cause a denial of service.

Recommendations For versions 0.3.0 through 0.3.6, consider restricting access to the mod channel module until a proper fix is applied to prevent protected operators from accessing locked-out channels.

Exploit

Fix

Related Identifiers

CVE-2005-1641

Affected Products

Ignitionserver

References · 3

• 🔥 http://ignition-project.com/security/20050515-protected-opers-cannot-join-channel-with-key · Exploit
• http://secunia.com/advisories/15388 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2005-1641 · Security Note