ID CVE-2007-2807
Summary Stack-based buffer overflow in mod/server.mod/servrmsg.c in Eggdrop 1.6.18, and possibly earlier, allows user-assisted, remote IRC servers to execute arbitrary code via a long private message.
References
Vulnerable Configurations
  • cpe:2.3:a:eggheads:eggdrop_irc_bot:1.6.8:*:*:*:*:*:*:*
    cpe:2.3:a:eggheads:eggdrop_irc_bot:1.6.8:*:*:*:*:*:*:*
  • cpe:2.3:a:eggheads:eggdrop_irc_bot:1.6.9:*:*:*:*:*:*:*
    cpe:2.3:a:eggheads:eggdrop_irc_bot:1.6.9:*:*:*:*:*:*:*
  • cpe:2.3:a:eggheads:eggdrop_irc_bot:1.6.10:*:*:*:*:*:*:*
    cpe:2.3:a:eggheads:eggdrop_irc_bot:1.6.10:*:*:*:*:*:*:*
  • cpe:2.3:a:eggheads:eggdrop_irc_bot:1.6.11:*:*:*:*:*:*:*
    cpe:2.3:a:eggheads:eggdrop_irc_bot:1.6.11:*:*:*:*:*:*:*
  • cpe:2.3:a:eggheads:eggdrop_irc_bot:1.6.12:*:*:*:*:*:*:*
    cpe:2.3:a:eggheads:eggdrop_irc_bot:1.6.12:*:*:*:*:*:*:*
  • cpe:2.3:a:eggheads:eggdrop_irc_bot:1.6.13:*:*:*:*:*:*:*
    cpe:2.3:a:eggheads:eggdrop_irc_bot:1.6.13:*:*:*:*:*:*:*
  • cpe:2.3:a:eggheads:eggdrop_irc_bot:1.6.14:*:*:*:*:*:*:*
    cpe:2.3:a:eggheads:eggdrop_irc_bot:1.6.14:*:*:*:*:*:*:*
  • cpe:2.3:a:eggheads:eggdrop_irc_bot:1.6.15:*:*:*:*:*:*:*
    cpe:2.3:a:eggheads:eggdrop_irc_bot:1.6.15:*:*:*:*:*:*:*
  • cpe:2.3:a:eggheads:eggdrop_irc_bot:1.6.16:*:*:*:*:*:*:*
    cpe:2.3:a:eggheads:eggdrop_irc_bot:1.6.16:*:*:*:*:*:*:*
  • cpe:2.3:a:eggheads:eggdrop_irc_bot:1.6.17:*:*:*:*:*:*:*
    cpe:2.3:a:eggheads:eggdrop_irc_bot:1.6.17:*:*:*:*:*:*:*
  • cpe:2.3:a:eggheads:eggdrop_irc_bot:*:*:*:*:*:*:*:*
    cpe:2.3:a:eggheads:eggdrop_irc_bot:*:*:*:*:*:*:*:*
CVSS
Base: 6.8 (as of 10-07-2009 - 05:05)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
NETWORK MEDIUM NONE
Impact
ConfidentialityIntegrityAvailability
PARTIAL PARTIAL PARTIAL
cvss-vector via4 AV:N/AC:M/Au:N/C:P/I:P/A:P
refmap via4
bid 24070
confirm http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=427157
debian
  • DSA-1448
  • DSA-1826
fedora
  • FEDORA-2007-4305
  • FEDORA-2007-4325
gentoo GLSA-200709-07
mandriva MDKSA-2007:175
misc http://www.eggheads.org/bugzilla/show_bug.cgi?id=462
osvdb 36237
sectrack 1018700
secunia
  • 25276
  • 26727
  • 26826
  • 27989
  • 28347
  • 35690
Last major update 10-07-2009 - 05:05
Published 22-05-2007 - 19:30
Last modified 10-07-2009 - 05:05
Back to Top