CVE-2007-3360 describes a critical remote command execution vulnerability in BitchX 1.1-final. Remote IRC servers can exploit a buffer overflow in the hook.c file by sending specially crafted NICK and EXEC strings, allowing them to inject and execute arbitrary shell commands on the client system. This vulnerability carries a CVSS score of 9.3, indicating high severity with network-based attacks, medium complexity, and complete compromise of confidentiality, integrity, and availability. While not listed on the CISA KEV catalog or having active Metasploit/Nuclei modules, an ExploitDB entry (EDB-4087) confirms the existence of exploit code, though there is minimal community discussion or media coverage.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
1.1-finalCPE matchmatch criteria | cpe:2.3:a:bitchx:bitchx:1.1-final:*:*:*:*:*:*:* |
CVSS version used by this source: 2.0
AV:N/AC:M/Au:N/C:C/I:C/A:C
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.