CVE-2007-3360 hook.c in BitchX 1.1-final allows remote IRC servers to execute arbitrary commands by sending a client certain data containing NICK and EXEC strings, which exceeds the bounds of a hash table, and inje...
HighCVSS 9.3
EPSS 7.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
hook.c in BitchX 1.1-final allows remote IRC servers to execute arbitrary commands by sending a client certain data containing NICK and EXEC strings, which exceeds the bounds of a hash table, and injects an EXEC hook function that receives and executes shell commands.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| bitchx | = 1.1-final | No fix listed |
References
- 37479 vdb-entry
- 25759 third-party-advisory vendor-advisory
- 34870 third-party-advisory
- SSA:2009-116-02 vendor-advisory
- 24579 vdb-entry
- bitchx-hook-command-execution(34969) vdb-entry
- 4087 exploit