10
CVSSv2

CVE-2007-4584

Published: 29/08/2007 Updated: 29/09/2017
CVSS v2 Base Score: 10 | Impact Score: 10 | Exploitability Score: 10
VMScore: 1000
Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C

Vulnerability Summary

Stack-based buffer overflow in BitchX 1.1 Final allows remote IRC servers to execute arbitrary code via a long string in a MODE command, related to the p_mode variable.

Vulnerable Product Search on Vulmon Subscribe to Product

bitchx bitchx 1.1-final

Exploits

#!/usr/bin/env ruby ###################################################### # BitchX-11 Final MODE Heap Overflow [0-day] # By bannedit # Discovered May 16th 2007 # - Yet another overflow which can overwrite GOT # # I found this vuln after modifying ilja's ircfuzz # code Currently this exploit attempts to # overwrite the GOT with the ret address to ...