Lucene search

K
ubuntucveUbuntu.comUB:CVE-2007-3360
HistoryJun 22, 2007 - 12:00 a.m.

CVE-2007-3360

2007-06-2200:00:00
ubuntu.com
ubuntu.com
7

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.017 Low

EPSS

Percentile

87.7%

hook.c in BitchX 1.1-final allows remote IRC servers to execute arbitrary
commands by sending a client certain data containing NICK and EXEC strings,
which exceeds the bounds of a hash table, and injects an EXEC hook function
that receives and executes shell commands.

Notes

Author Note
jdstrand debdiff in LP
OSVersionArchitecturePackageVersionFilename
ubuntu6.06noarchircii-pana< 1:1.1-4ubuntu0.1UNKNOWN
ubuntu6.10noarchircii-pana< 1:1.1-4ubuntu1.1UNKNOWN
ubuntu7.04noarchircii-pana< 1:1.1-4ubuntu2.1UNKNOWN

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.017 Low

EPSS

Percentile

87.7%

Related for UB:CVE-2007-3360