Lucene search
HistoryNov 10, 2007 - 2:46 a.m.
CVE-2007-5922
cypress
bitchx
backdoor
sensitive information
security vulnerability
cve-2007-5922
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
6 Medium
AI Score
Confidence
High
0.004 Low
EPSS
Percentile
72.3%
The modules/mdop.m in the Cypress 1.0k script for BitchX, as downloaded from a distribution site in November 2007, contains an externally introduced backdoor that e-mails sensitive information (hostnames, usernames, and shell history) to a fixed address.
Affected configurations
Node
bitchxbitchx
ORcypresscypressMatch1.0k
| CPE | Name | Operator | Version |
|---|---|---|---|
| bitchx:bitchx | bitchx | eq | * |
| cypress:cypress | cypress | eq | 1.0k |
Related
nvd
nvd
CVE-2007-5922
2007-11-10 02:46:00
prion
prion
Information disclosure
2007-11-10 02:46:00
cvelist
cvelist
CVE-2007-5922
2007-11-10 02:00:00
nessus
nessus
freebsd
freebsd
irc/bitchx -- multiple vulnerabilities
2007-08-28 00:00:00
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
6 Medium
AI Score
Confidence
High
0.004 Low
EPSS
Percentile
72.3%
Related for CVE-2007-5922