Required CVE Record Information
Description
mod_channel.bas in The Ignition Project ignitionServer 0.3.0 to 0.3.6, and possibly earlier versions, does not properly verify whether a host has the owner privileges required to delete IRC channel access entries, which allows remote attackers to bypass intended restrictions.
References 2 Total
Updated:
This container includes required additional information provided by the CVE Program for this vulnerability.
References 2 Total
- secunia.com: 15388 third-party-advisoryx_transferred
- http://www.ignition-project.com/security/20050414-hosts-delete-owner-access-entries x_transferred