Executive Summary

Informations
NameCVE-2007-4584First vendor Publication2007-08-28
VendorCveLast vendor Modification2011-03-07

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:L/Au:N/C:C/I:C/A:C)
Cvss Base Score10Attack RangeNetwork
Cvss Impact Score10Attack ComplexityLow
Cvss Expoit Score10AuthenticationNone Required
Calculate full CVSS 2.0 Vectors scores

Security Protection

ImpactsProvides administrator access : Allows complete confidentiality, integrity, and availability violation; Allows unauthorized disclosure of information; Allows disruption of service.

Detail

Stack-based buffer overflow in BitchX 1.1 Final allows remote IRC servers to execute arbitrary code via a long string in a MODE command, related to the p_mode variable.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4584

CWE : Common Weakness Enumeration

%idName
100 %CWE-119Failure to Constrain Operations within the Bounds of a Memory Buffer

CPE : Common Platform Enumeration

TypeDescriptionCount
Application1

Milw0rm Exploits

idDescription
2007-08-27BitchX 1.1 Final MODE Remote Heap Overflow Exploit (0-day)

OpenVAS Exploits

DateDescription
2008-09-24Name : Gentoo Security Advisory GLSA 200807-12 (bitchx)
File : nvt/glsa_200807_12.nasl

Open Source Vulnerability Database (OSVDB)

idDescription
37480BitchX IRC Client MODE Command Remote Overflow

Nessus® Vulnerability Scanner

DateDescription
2013-06-02Name : The remote FreeBSD host is missing a security-related update.
File : freebsd_pkg_0a799a8ec9d411e2a42414dae938ec40.nasl - Type : ACT_GATHER_INFO
2008-07-23Name : The remote Gentoo host is missing one or more security-related patches.
File : gentoo_GLSA-200807-12.nasl - Type : ACT_GATHER_INFO

Sources (Detail)

SourceUrl
BID http://www.securityfocus.com/bid/25462
GENTOO http://security.gentoo.org/glsa/glsa-200807-12.xml
MILW0RM http://www.milw0rm.com/exploits/4321
SLACKWARE http://slackware.com/security/viewer.php?l=slackware-security&y=2009&...
VUPEN http://www.vupen.com/english/advisories/2007/2994
XF http://xforce.iss.net/xforce/xfdb/36306

Alert History

If you want to see full details history, please login or register.
0
1
2
3
DateInformations
2016-06-28 16:52:05
  • Multiple Updates
2016-04-26 16:32:20
  • Multiple Updates
2014-02-17 10:41:29
  • Multiple Updates
2013-05-11 10:35:10
  • Multiple Updates