SIRCD Server 0.5.2/0.5.3 - Operator Privilege Escalation

Author: Victor Jerlin
type: remote
platform: multiple
port: 
date_added: 2003-11-20 
date_updated: 2012-12-14 
verified: 1 
codes: OSVDB-2857 
tags: 
aliases:  
screenshot_url:  
application_url: 

source: https://www.securityfocus.com/bid/9097/info

sircd has been reported prone to a privilege escalation vulnerability. It has been reported that any user logged on to the sircd server, may set their usermode to +o, or operator mode.

An attacker may exploit this condition to hijack IRC channels or impersonate users, these privileges may aid the attacker in further attacks launched against the target server.

MODE <nick> +o