CVE-2005-1640

mod_channel.bas in The Ignition Project ignitionServer 0.3.0 to 0.3.6, and possibly earlier versions, does not properly verify whether a host has the owner privileges required to delete IRC channel access entries, which allows remote attackers to bypass intended restrictions.

CVSS v2.0

7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

2.48% chance of exploitation in the next 30 days, 83th percentile

Published

2005-05-17

Updated

2024-08-07

Proof-of-concept exploits (1)

• http://www.ignition-project.com/security/20050414-hosts-delete-owner-access-entries

References

• CVE Record
• NVD entry

Related

• CVE-2005-1637
• CVE-2005-1641
• CVE-2005-1633
• CVE-2005-1642
• CVE-2005-1629
• CVE-2005-1645