PT-2007-6855 · Bitchx · Bitchx

Publicado 2007-11-10 · Atualizado 2018-10-15 · CVE-2007-5922

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions BitchX version 1.0k

Description The issue concerns an externally introduced backdoor in the Cypress script for BitchX. This backdoor sends sensitive information, including hostnames, usernames, and shell history, to a fixed email address.

Recommendations For BitchX version 1.0k, consider removing or disabling the modules/mdop.m script to prevent the backdoor from sending sensitive information. Restrict access to the affected script to minimize the risk of exploitation.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2007-5922

Produtos afetados

Bitchx

Referências · 5

• https://nvd.nist.gov/vuln/detail/CVE-2007-5922 · Nota de Segurança
• http://securityfocus.com/bid/26372 · Nota
• http://securityfocus.com/archive/1/483350/100/0/threaded · Nota
• http://secunia.com/advisories/27556 · Aviso do Fabricante
• http://osvdb.org/42073 · Nota