CVE Vulnerabilities

CVE-2007-3360

Published: Jun 22, 2007 | Modified: Oct 11, 2017
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
9.3 HIGH
AV:N/AC:M/Au:N/C:C/I:C/A:C
RedHat/V2
RedHat/V3
Ubuntu
MEDIUM

hook.c in BitchX 1.1-final allows remote IRC servers to execute arbitrary commands by sending a client certain data containing NICK and EXEC strings, which exceeds the bounds of a hash table, and injects an EXEC hook function that receives and executes shell commands.

Affected Software

Name Vendor Start Version End Version
Bitchx Bitchx 1.1-final (including) 1.1-final (including)
Ircii-pana Ubuntu dapper *
Ircii-pana Ubuntu devel *
Ircii-pana Ubuntu edgy *
Ircii-pana Ubuntu feisty *

References