bitchx records
5 published records for vendor bitchx.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 2
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Records by year
Bar: total · dark part: CISA KEV.
Recurring classes
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer1
- CWE-20 Improper Input Validation1
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor1
- CWE-59 Improper Link Resolution Before File Access ('Link Following')1
The weakness classes this vendor ships most often: where to look.
CWEAll records
5 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
44Plan | CVE-2007-4584Proof of concept | Stack-based buffer overflow in BitchX 1.1 Final allows remote IRC servers to execute arbitrary code via a long string in a MODE command, relbitchx · bitchx · CWE-119 | Critical10.0 | — | 14.6% | Aug 28, 2007 |
39Monitor | CVE-2007-3360Proof of concept | hook.c in BitchX 1.1-final allows remote IRC servers to execute arbitrary commands by sending a client certain data containing NICK and EXECbitchx · bitchx | Critical9.3 | — | 7.4% | Jun 22, 2007 |
21Monitor | CVE-2003-1450Proof of concept | BitchX 75p3 and 1.0c16 through 1.0c20cvs allows remote attackers to cause a denial of service (segmentation fault) via a malformed RPL_NAMREbitchx · bitchx · CWE-20 | Medium5.0 | — | 3.5% | Dec 31, 2003 |
20Monitor | CVE-2007-5922No exploit | The modules/mdop.m in the Cypress 1.0k script for BitchX, as downloaded from a distribution site in November 2007, contains an externally inbitchx · bitchx · CWE-200 | Medium5.0 | — | 1.0% | Nov 9, 2007 |
18Monitor | CVE-2007-5839No exploit | The e_hostname function in commands.c in BitchX 1.1a allows local users to overwrite arbitrary files via a symlink attack on temporary filesbitchx · bitchx · CWE-59 | Medium4.6 | — | 0.3% | Nov 6, 2007 |
- CVE-2007-458444Plan
Stack-based buffer overflow in BitchX 1.1 Final allows remote IRC servers to execute arbitrary code via a long string in a MODE command, rel
CriticalCVSS 10.0Proof of conceptEPSS 14%bitchx · bitchxAug 28, 2007
- CVE-2007-336039Monitor
hook.c in BitchX 1.1-final allows remote IRC servers to execute arbitrary commands by sending a client certain data containing NICK and EXEC
CriticalCVSS 9.3Proof of conceptEPSS 7%bitchx · bitchxJun 22, 2007
- CVE-2003-145021Monitor
BitchX 75p3 and 1.0c16 through 1.0c20cvs allows remote attackers to cause a denial of service (segmentation fault) via a malformed RPL_NAMRE
MediumCVSS 5.0Proof of conceptEPSS 3%bitchx · bitchxDec 31, 2003
- CVE-2007-592220Monitor
The modules/mdop.m in the Cypress 1.0k script for BitchX, as downloaded from a distribution site in November 2007, contains an externally in
MediumCVSS 5.0No exploitEPSS 1%bitchx · bitchxNov 9, 2007
- CVE-2007-583918Monitor
The e_hostname function in commands.c in BitchX 1.1a allows local users to overwrite arbitrary files via a symlink attack on temporary files
MediumCVSS 4.6No exploitEPSS 0%bitchx · bitchxNov 6, 2007