ircu 2.10.12.05 and earlier does not properly synchronize a kick action in certain cross scenarios, which allows remote authenticated operators to prevent later kick or de-op actions from non-local ops.Referenceshttp://securityreason.com/securityalert/3031http://www.securityfocus.com/archive/1/476285/100/0/threadedhttps://exchange.xforce.ibmcloud.com/vulnerabilities/35996http://osvdb.org/46713http://www.securityfocus.com/bid/25285
