CVE-2007-4584

{"id": "CVE-2007-4584", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 10.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": false, "impactScore": 10.0, "baseSeverity": "HIGH", "obtainAllPrivilege": true, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2007-08-29T01:17:00.000", "references": [{"url": "http://osvdb.org/37480", "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/26578", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/31180", "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/34870", "source": "cve@mitre.org"}, {"url": "http://security.gentoo.org/glsa/glsa-200807-12.xml", "source": "cve@mitre.org"}, {"url": "http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.285737", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/25462", "source": "cve@mitre.org"}, {"url": "http://www.vupen.com/english/advisories/2007/2994", "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/36306", "source": "cve@mitre.org"}, {"url": "https://www.exploit-db.com/exploits/4321", "source": "cve@mitre.org"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-119"}]}], "descriptions": [{"lang": "en", "value": "Stack-based buffer overflow in BitchX 1.1 Final allows remote IRC servers to execute arbitrary code via a long string in a MODE command, related to the p_mode variable."}, {"lang": "es", "value": "Desbordamiento de b\u00fafer basado en pila en BitchX 1.1 Final permite a servidores IRC remotos ejecutar c\u00f3digo de su elecci\u00f3n mediante una cadena larga en un comando MODE, relacionado con la variable p_mode."}], "lastModified": "2017-09-29T01:29:19.563", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:bitchx:bitchx:1.1-final:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "470FD7C0-78F6-48C2-B98A-F873B668A501"}], "operator": "OR"}]}], "vendorComments": [{"comment": "Not vulnerable. This issue did not affect the version of IrcII as shipped with Red Hat Enterprise Linux 2.1. IrcII was not shipped in Enterprise Linux 3, 4, or 5.", "lastModified": "2007-09-24T00:00:00", "organization": "Red Hat"}], "sourceIdentifier": "cve@mitre.org"}