« Volver al listado

CVE-2005-1640

Estado: ModificadaAlta (7.5)—

mod_channel.bas in The Ignition Project ignitionServer 0.3.0 to 0.3.6, and possibly earlier versions, does not properly verify whether a host has the owner privileges required to delete IRC channel access entries, which allows remote attackers to bypass intended restrictions.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

THE Ignition Project — Ignitionserver

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2005-1640",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 7.5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 6.4,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": true,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2005-05-17T04:00:00.000",
  "references": [
    {
      "url": "http://secunia.com/advisories/15388",
      "tags": [
        "Patch"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.ignition-project.com/security/20050414-hosts-delete-owner-access-entries",
      "tags": [
        "Exploit",
        "Patch",
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://secunia.com/advisories/15388",
      "tags": [
        "Patch"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.ignition-project.com/security/20050414-hosts-delete-owner-access-entries",
      "tags": [
        "Exploit",
        "Patch",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "mod_channel.bas in The Ignition Project ignitionServer 0.3.0 to 0.3.6, and possibly earlier versions, does not properly verify whether a host has the owner privileges required to delete IRC channel access entries, which allows remote attackers to bypass intended restrictions."
    }
  ],
  "lastModified": "2026-06-16T22:13:25.140",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:the_ignition_project:ignitionserver:0.3.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "EB800EF2-EB9C-4FBB-ACE6-0E42C90A349B"
            },
            {
              "criteria": "cpe:2.3:a:the_ignition_project:ignitionserver:0.3.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "BA86F865-68C6-49A4-88BA-8E0691926618"
            },
            {
              "criteria": "cpe:2.3:a:the_ignition_project:ignitionserver:0.3.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "799A4534-1419-4F01-BC3F-5955529A347D"
            },
            {
              "criteria": "cpe:2.3:a:the_ignition_project:ignitionserver:0.3.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B0193665-A611-486F-973D-4136997450CD"
            },
            {
              "criteria": "cpe:2.3:a:the_ignition_project:ignitionserver:0.3.4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "DE7C6AFA-E1BC-4173-BC66-5AE03B6DF43F"
            },
            {
              "criteria": "cpe:2.3:a:the_ignition_project:ignitionserver:0.3.5:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "63E5A5EE-2EE0-4709-AE04-41D6543AA1C0"
            },
            {
              "criteria": "cpe:2.3:a:the_ignition_project:ignitionserver:0.3.6:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B65A3D73-7721-4A39-8807-C1DCBEA7FAB2"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}