PT-2007-6855 · Bitchx · Bitchx

Published 2007-11-10 · Updated 2018-10-15 · CVE-2007-5922

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions BitchX version 1.0k

Description The issue concerns an externally introduced backdoor in the Cypress script for BitchX. This backdoor sends sensitive information, including hostnames, usernames, and shell history, to a fixed email address.

Recommendations For BitchX version 1.0k, consider removing or disabling the modules/mdop.m script to prevent the backdoor from sending sensitive information. Restrict access to the affected script to minimize the risk of exploitation.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2007-5922

Affected Products

Bitchx

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2007-5922 · Security Note
• http://secunia.com/advisories/27556 · Vendor Advisory
• http://securityfocus.com/bid/26372 · Note
• http://securityfocus.com/archive/1/483350/100/0/threaded · Note
• http://osvdb.org/42073 · Note