Lucene search
HistoryJun 22, 2007 - 6:30 p.m.
CVE-2007-3360
bitchx
irc
remote execution
cve-2007-3360
security vulnerability
9.3 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
7.5 High
AI Score
Confidence
High
0.017 Low
EPSS
Percentile
87.7%
hook.c in BitchX 1.1-final allows remote IRC servers to execute arbitrary commands by sending a client certain data containing NICK and EXEC strings, which exceeds the bounds of a hash table, and injects an EXEC hook function that receives and executes shell commands.
Affected configurations
Node
bitchxbitchxMatch1.1-final
| CPE | Name | Operator | Version |
|---|---|---|---|
| bitchx:bitchx | bitchx | eq | 1.1-final |
Related
cvelist
cvelist
CVE-2007-3360
2007-06-22 18:00:00
nvd
nvd
CVE-2007-3360
2007-06-22 18:30:00
prion
prion
Out-of-bounds
2007-06-22 18:30:00
ubuntucve
ubuntucve
CVE-2007-3360
2007-06-22 00:00:00
slackware
slackware
bitchx EOLed in Slackware
2009-04-26 15:51:05
9.3 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
7.5 High
AI Score
Confidence
High
0.017 Low
EPSS
Percentile
87.7%
Related for CVE-2007-3360