CVE-2007-5922 The modules/mdop.m in the Cypress 1.0k script for BitchX, as downloaded from a distribution site in November 2007, contains an externally introduced backdoor that e-mails sensitive information (hostna...
MediumCVSS 5.0
EPSS 1.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The modules/mdop.m in the Cypress 1.0k script for BitchX, as downloaded from a distribution site in November 2007, contains an externally introduced backdoor that e-mails sensitive information (hostnames, usernames, and shell history) to a fixed address.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| bitchx | All versions | No fix listed |
| cypress | = 1.0k | No fix listed |
References
- 42073 vdb-entry
- 27556 third-party-advisory vendor-advisory
- 20071106 Cypress BX script backdoored? mailing-list
- 26372 vdb-entry