hook.c in BitchX 1.1-final allows remote IRC servers to execute arbitrary commands by sending a client certain data containing NICK and EXEC strings, which exceeds the bounds of a hash table, and injects an EXEC hook function that receives and executes shell commands.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Bitchx | Bitchx | 1.1-final (including) | 1.1-final (including) |
| Ircii-pana | Ubuntu | dapper | * |
| Ircii-pana | Ubuntu | devel | * |
| Ircii-pana | Ubuntu | edgy | * |
| Ircii-pana | Ubuntu | feisty | * |