bitchx EOLed in Slackware

This is a notice that bitchx, an IRC client based on ircii-EPIC4, has been removed from Slackware -current and will not be part of future Slackware releases. Security issues and bugs have been reported, but upstream work seems to have stalled leaving bitchx in a state where there are known proble...

CVE-2007-3360

CVE-2007-3360 affects BitchX 1.1-final, where a bug in hook.c allows a remote IRC server to execute arbitrary shell commands. By sending crafted data containing NICK and EXEC strings, the input overflows a hash table and injects an EXEC hook that runs commands on the client. This is a network‑acc...