CVE-2007-2807 Stack-based buffer overflow in mod/server.mod/servrmsg.c in Eggdrop 1.6.18, and possibly earlier, allows user-assisted, remote IRC servers to execute arbitrary code via a long private message.
MediumCVSS 6.8
EPSS 10.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Stack-based buffer overflow in mod/server.mod/servrmsg.c in Eggdrop 1.6.18, and possibly earlier, allows user-assisted, remote IRC servers to execute arbitrary code via a long private message.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| eggheads eggdrop irc bot | <= 1.6.18 | No fix listed |
| eggheads eggdrop irc bot | = 1.6.8 | No fix listed |
| eggheads eggdrop irc bot | = 1.6.9 | No fix listed |
| eggheads eggdrop irc bot | = 1.6.10 | No fix listed |
| eggheads eggdrop irc bot | = 1.6.11 | No fix listed |
| eggheads eggdrop irc bot | = 1.6.12 | No fix listed |
| eggheads eggdrop irc bot | = 1.6.13 | No fix listed |
| eggheads eggdrop irc bot | = 1.6.14 | No fix listed |
| eggheads eggdrop irc bot | = 1.6.15 | No fix listed |
| eggheads eggdrop irc bot | = 1.6.16 | No fix listed |
| eggheads eggdrop irc bot | = 1.6.17 | No fix listed |
| debian/eggdrop(Debian:12) | < 1.6.18-1.1 | 1.6.18-1.1 |
| debian/eggdrop(Debian:13) | < 1.6.18-1.1 | 1.6.18-1.1 |
| debian/eggdrop(Debian:14) | < 1.6.18-1.1 | 1.6.18-1.1 |
References
- Debian Security Tracker CVE-2007-2807 vendor-advisory
- bugs.debian.org issue-tracking
- bugs.debian.org
- 36237 vdb-entry
- 25276 third-party-advisory vendor-advisory
- 26727 third-party-advisory
- 26826 third-party-advisory
- 27989 third-party-advisory
- 28347 third-party-advisory
- 35690 third-party-advisory
- GLSA-200709-07 vendor-advisory
- 1018700 vdb-entry
- DSA-1448 vendor-advisory
- DSA-1826 vendor-advisory
- www.eggheads.org exploit
- MDKSA-2007:175 vendor-advisory
- 24070 vdb-entry
- FEDORA-2007-4305 vendor-advisory
- FEDORA-2007-4325 vendor-advisory