Stack-based buffer overflow in BitchX 1.1 Final allows remote IRC servers to execute arbitrary code via a long string in a MODE command, re…

Exploit prediction (EPSS)

14.69% probability of exploitation in the next 30 days, higher than 97% of all scored CVEs.

Exploits and detections

• EDB-4321 BitchX 1.1 Final - MODE Remote Heap Overflow · remote · 2007-08-27

CVSS scores

Classification

Weakness

• CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

References

• slackware.com /security/viewer.php?l=slackware-security&y=2009&m=slackware-security.285737 · vendor-advisory, x_refsource_SLACKWARE, x_transferred
• secunia.com /advisories/34870 · third-party-advisory, x_refsource_SECUNIA, x_transferred
• exchange.xforce.ibmcloud.com /vulnerabilities/36306 · vdb-entry, x_refsource_XF, x_transferred
• securityfocus.com /bid/25462 · vdb-entry, x_refsource_BID, x_transferred
• secunia.com /advisories/26578 · third-party-advisory, x_refsource_SECUNIA, x_transferred
• secunia.com /advisories/31180 · third-party-advisory, x_refsource_SECUNIA, x_transferred
• osvdb.org /37480 · vdb-entry, x_refsource_OSVDB, x_transferred
• exploit-db.com /exploits/4321 · exploit, x_refsource_EXPLOIT-DB, x_transferred
• vupen.com /english/advisories/2007/2994 · vdb-entry, x_refsource_VUPEN, x_transferred
• security.gentoo.org /glsa/glsa-200807-12.xml · vendor-advisory, x_refsource_GENTOO, x_transferred

Sources

• CVE List: CVE-2007-4584
• NVD: CVE-2007-4584

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.