Back to Database
Status published
Medium
CVE-2004-2553
The Ignition Project ignitionServer 0.1.2 through 0.1.2-R2 allows remote authenticated...
Vulnerability Description
The Ignition Project ignitionServer 0.1.2 through 0.1.2-R2 allows remote authenticated users with local IRC operator privileges to obtain global IRC operator privileges by using the unofficial umode command with the +ORD argument.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2004-2553
Credits & Attribution
No credits recorded in the NVD database.
References
- http://securitytracker.com/id?1009301
- http://sourceforge.net/tracker/index.php?func=detail&aid=891555&group_id=96071&atid=613526
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15363
- http://www.securityfocus.com/bid/9783
- http://www.osvdb.org/4121
- http://secunia.com/advisories/11017
- http://cvs.sourceforge.net/viewcvs.py/ignition/ignitionserver/docs/security/20040302-operator-privilege-escalation.txt?view=markup
More from the ignition project
View All →CVE-2005-1641
mod_channel in The Ignition Project ignitionServer 0.3.0 to 0.3.6, and...
Low
2.1
CVE-2005-1640
mod_channel.bas in The Ignition Project ignitionServer 0.3.0 to 0.3.6, and...
High
7.5
CVE-2004-2431
Unknown vulnerability in The Ignition Project ignitionServer 0.1.2 through 0.3.1,...
High
7.5
Affected Vendor
the ignition project
View all reports →Affected Software
ignitionserver
Vulnerable Versions:
0.1.2, 0.1.2_r1, 0.1.2_r2
Timeline
Official Publish:
November 21st, 2005
Last Modified:
August 8th, 2024
Added to House:
July 18th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.