ignitionServer Global IRC Operator Privilege Escalation Vulnerability

Bugtraq ID:	9783
Class:	Design Error
CVE:	CVE-2004-2553
Remote:	Yes
Local:	No
Published:	Feb 29 2004 12:00AM
Updated:	Feb 29 2004 12:00AM
Credit:	This issue was announced by the vendor.
Vulnerable:	The Ignition Project ignitionServer 0.1.2 Release 2 The Ignition Project ignitionServer 0.1.2
Not Vulnerable:	The Ignition Project ignitionServer 0.2.1 -BRC1

ignitionServer Global IRC Operator Privilege Escalation Vulnerability

ignitionServer is prone to a vulnerability that may permit a local IRC operator to escalate their privileges to that of a global IRC operator through the use of an undocumented command.

ignitionServer Global IRC Operator Privilege Escalation Vulnerability

There is no exploit required.

ignitionServer Global IRC Operator Privilege Escalation Vulnerability

Solution:
This issue is addressed in ignitionServer 0.2.1-BRC1.


The Ignition Project ignitionServer 0.1.2 Release 2

• The Ignition Project ignitionServer 0.2.1-BRC1
  http://sourceforge.net/project/showfiles.php?group_id=96071

The Ignition Project ignitionServer 0.1.2

• The Ignition Project ignitionServer 0.2.1-BRC1
  http://sourceforge.net/project/showfiles.php?group_id=96071

ignitionServer Global IRC Operator Privilege Escalation Vulnerability

References:

• The Ignition Project Homepage (The Ignition Project)