CVE-2007-3360: Critical severity BitchX BitchX vulnerability

Published Jun 22, 2007

Updated

hook.c in BitchX 1.1-final allows remote IRC servers to execute arbitrary commands by sending a client certain data containing NICK and EXEC strings, which exceeds the bounds of a hash table, and injects an EXEC hook function that receives and executes shell commands.

Affected Software

1 affected component

BitchX BitchX=1.1-final

Event History

Jun 22, 2007

CVE Published

06:30 PM

CVE Published

via MITRE·10:00 PM

Data Sourced

via MITRE·10:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2007-3360?

CVE-2007-3360 is considered to have a high severity due to its ability to allow remote command execution.

How do I fix CVE-2007-3360?

The recommended fix for CVE-2007-3360 is to upgrade to a patched version of BitchX, as the vulnerability is present in BitchX 1.1-final.

What are the implications of CVE-2007-3360?

CVE-2007-3360 may lead to unauthorized access and execution of arbitrary commands on the affected system.

Who is affected by CVE-2007-3360?

CVE-2007-3360 affects users of BitchX version 1.1-final, particularly in IRC environments.

Can CVE-2007-3360 be exploited remotely?

Yes, CVE-2007-3360 can be exploited remotely by sending specially crafted data to affected clients.