CVE-2004-2553 - Vulnerability Details - OpenCVE

The Ignition Project ignitionServer 0.1.2 through 0.1.2-R2 allows remote authenticated users with local IRC operator privileges to obtain global IRC operator privileges by using the unofficial umode command with the +ORD argument.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

Access Vector Network

Access Complexity Medium

Authentication Single

Confidentiality Impact Partial

Integrity Impact Partial

Availability Impact Partial

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
The Ignition Project	Ignitionserver

Configuration 1 [-]

OR	cpe:2.3:a:the_ignition_project:ignitionserver:0.1.2:::::::*
	cpe:2.3:a:the_ignition_project:ignitionserver:0.1.2_r1:::::::*
	cpe:2.3:a:the_ignition_project:ignitionserver:0.1.2_r2:::::::*

No data.

References

Link	Providers
http://cvs.sourceforge.net/viewcvs.py/ignition/ignitionserver/docs/security/20040302-operator-privilege-escalation.txt?view=markup
http://secunia.com/advisories/11017
http://securitytracker.com/id?1009301
http://sourceforge.net/tracker/index.php?func=detail&aid=891555&group_id=96071&atid=613526
http://www.osvdb.org/4121
http://www.securityfocus.com/bid/9783
https://exchange.xforce.ibmcloud.com/vulnerabilities/15363

History

No history.

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2005-11-21T11:00:00

Updated: 2024-08-08T01:29:14.020Z

Reserved: 2005-11-21T00:00:00

Link: CVE-2004-2553

Vulnrichment

No data.

NVD

Status : Modified

Published: 2004-12-31T05:00:00.000

Modified: 2024-11-20T23:53:38.973

Link: CVE-2004-2553

Redhat

No data.

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2004-03-02T00:00:00", "descriptions": [{"lang": "en", "value": "The Ignition Project ignitionServer 0.1.2 through 0.1.2-R2 allows remote authenticated users with local IRC operator privileges to obtain global IRC operator privileges by using the unofficial umode command with the +ORD argument."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2017-07-10T14:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "1009301", "tags": ["vdb-entry", "x_refsource_SECTRACK"], "url": "http://securitytracker.com/id?1009301"}, {"tags": ["x_refsource_MISC"], "url": "http://sourceforge.net/tracker/index.php?func=detail&aid=891555&group_id=96071&atid=613526"}, {"name": "ignition-server-gain-privileges(15363)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/15363"}, {"name": "9783", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/9783"}, {"name": "4121", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://www.osvdb.org/4121"}, {"name": "11017", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/11017"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://cvs.sourceforge.net/viewcvs.py/ignition/ignitionserver/docs/security/20040302-operator-privilege-escalation.txt?view=markup"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2004-2553", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "The Ignition Project ignitionServer 0.1.2 through 0.1.2-R2 allows remote authenticated users with local IRC operator privileges to obtain global IRC operator privileges by using the unofficial umode command with the +ORD argument."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "1009301", "refsource": "SECTRACK", "url": "http://securitytracker.com/id?1009301"}, {"name": "http://sourceforge.net/tracker/index.php?func=detail&aid=891555&group_id=96071&atid=613526", "refsource": "MISC", "url": "http://sourceforge.net/tracker/index.php?func=detail&aid=891555&group_id=96071&atid=613526"}, {"name": "ignition-server-gain-privileges(15363)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/15363"}, {"name": "9783", "refsource": "BID", "url": "http://www.securityfocus.com/bid/9783"}, {"name": "4121", "refsource": "OSVDB", "url": "http://www.osvdb.org/4121"}, {"name": "11017", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/11017"}, {"name": "http://cvs.sourceforge.net/viewcvs.py/ignition/ignitionserver/docs/security/20040302-operator-privilege-escalation.txt?view=markup", "refsource": "CONFIRM", "url": "http://cvs.sourceforge.net/viewcvs.py/ignition/ignitionserver/docs/security/20040302-operator-privilege-escalation.txt?view=markup"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-08T01:29:14.020Z"}, "title": "CVE Program Container", "references": [{"name": "1009301", "tags": ["vdb-entry", "x_refsource_SECTRACK", "x_transferred"], "url": "http://securitytracker.com/id?1009301"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "http://sourceforge.net/tracker/index.php?func=detail&aid=891555&group_id=96071&atid=613526"}, {"name": "ignition-server-gain-privileges(15363)", "tags": ["vdb-entry", "x_refsource_XF", "x_transferred"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/15363"}, {"name": "9783", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/9783"}, {"name": "4121", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://www.osvdb.org/4121"}, {"name": "11017", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/11017"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://cvs.sourceforge.net/viewcvs.py/ignition/ignitionserver/docs/security/20040302-operator-privilege-escalation.txt?view=markup"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2004-2553", "datePublished": "2005-11-21T11:00:00", "dateReserved": "2005-11-21T00:00:00", "dateUpdated": "2024-08-08T01:29:14.020Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:the_ignition_project:ignitionserver:0.1.2:*:*:*:*:*:*:*", "matchCriteriaId": "641C594E-35BC-4F2F-9E15-3D62FE8FCBD6", "vulnerable": true}, {"criteria": "cpe:2.3:a:the_ignition_project:ignitionserver:0.1.2_r1:*:*:*:*:*:*:*", "matchCriteriaId": "6FF803FC-00A2-464E-80F2-293022BE3F6C", "vulnerable": true}, {"criteria": "cpe:2.3:a:the_ignition_project:ignitionserver:0.1.2_r2:*:*:*:*:*:*:*", "matchCriteriaId": "1D702B7D-19E6-49D9-8E0E-267811688DF9", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "The Ignition Project ignitionServer 0.1.2 through 0.1.2-R2 allows remote authenticated users with local IRC operator privileges to obtain global IRC operator privileges by using the unofficial umode command with the +ORD argument."}], "id": "CVE-2004-2553", "lastModified": "2024-11-20T23:53:38.973", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "SINGLE", "availabilityImpact": "PARTIAL", "baseScore": 6.0, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:S/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 6.8, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": true, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2004-12-31T05:00:00.000", "references": [{"source": "cve@mitre.org", "url": "http://cvs.sourceforge.net/viewcvs.py/ignition/ignitionserver/docs/security/20040302-operator-privilege-escalation.txt?view=markup"}, {"source": "cve@mitre.org", "tags": ["Patch"], "url": "http://secunia.com/advisories/11017"}, {"source": "cve@mitre.org", "tags": ["Patch"], "url": "http://securitytracker.com/id?1009301"}, {"source": "cve@mitre.org", "url": "http://sourceforge.net/tracker/index.php?func=detail&aid=891555&group_id=96071&atid=613526"}, {"source": "cve@mitre.org", "url": "http://www.osvdb.org/4121"}, {"source": "cve@mitre.org", "tags": ["Patch"], "url": "http://www.securityfocus.com/bid/9783"}, {"source": "cve@mitre.org", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/15363"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://cvs.sourceforge.net/viewcvs.py/ignition/ignitionserver/docs/security/20040302-operator-privilege-escalation.txt?view=markup"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch"], "url": "http://secunia.com/advisories/11017"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch"], "url": "http://securitytracker.com/id?1009301"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://sourceforge.net/tracker/index.php?func=detail&aid=891555&group_id=96071&atid=613526"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.osvdb.org/4121"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch"], "url": "http://www.securityfocus.com/bid/9783"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/15363"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}], "source": "nvd@nist.gov", "type": "Primary"}]}