Executive Summary

Informations
NameCVE-2007-4584First vendor Publication2007-08-28
VendorCveLast vendor Modification2011-03-07

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:L/Au:N/C:C/I:C/A:C)
Cvss Base Score10Attack RangeNetwork
Cvss Impact Score10Attack ComplexityLow
Cvss Expoit Score10AuthenticationNone Required
Calculate full CVSS 2.0 Vectors scores

Security Protection

ImpactsProvides administrator access : Allows complete confidentiality, integrity, and availability violation; Allows unauthorized disclosure of information; Allows disruption of service.

Detail

Stack-based buffer overflow in BitchX 1.1 Final allows remote IRC servers to execute arbitrary code via a long string in a MODE command, related to the p_mode variable.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4584

CWE : Common Weakness Enumeration

idName
CWE-119Failure to Constrain Operations within the Bounds of a Memory Buffer

CPE : Common Platform Enumeration

TypeDescriptionCount
Application1

Milw0rm Exploits

idDescription
2007-08-27BitchX 1.1 Final MODE Remote Heap Overflow Exploit (0-day)

OpenVAS Exploits

DateDescription
2008-09-24Name : Gentoo Security Advisory GLSA 200807-12 (bitchx)
File : nvt/glsa_200807_12.nasl

Open Source Vulnerability Database (OSVDB)

idDescription
37480BitchX IRC Client MODE Command Remote Overflow

Nessus® Vulnerability Scanner

DateDescription
2013-06-02Name : The remote FreeBSD host is missing a security-related update.
File : freebsd_pkg_0a799a8ec9d411e2a42414dae938ec40.nasl - Type : ACT_GATHER_INFO
2008-07-23Name : The remote Gentoo host is missing one or more security-related patches.
File : gentoo_GLSA-200807-12.nasl - Type : ACT_GATHER_INFO

Internal Sources (Detail)

SourceUrl
BIDhttp://www.securityfocus.com/bid/25462
GENTOOhttp://security.gentoo.org/glsa/glsa-200807-12.xml
MILW0RMhttp://www.milw0rm.com/exploits/4321
OSVDBhttp://osvdb.org/37480
SECUNIAhttp://secunia.com/advisories/26578
http://secunia.com/advisories/31180
http://secunia.com/advisories/34870
SLACKWAREhttp://slackware.com/security/viewer.php?l=slackware-security&y=2009&...
VUPENhttp://www.vupen.com/english/advisories/2007/2994
XFhttp://xforce.iss.net/xforce/xfdb/36306

Alert History

If you want to see full details history, please login or register.
0
1
DateInformations
2014-02-17 10:41:29
  • Multiple Updates
2013-05-11 10:35:10
  • Multiple Updates