CVE-2007-2807

Published: May 22, 2007Modified: Apr 23, 2026

6.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 8.6 / Impact: 6.4

Source: NVD

Description

Stack-based buffer overflow in mod/server.mod/servrmsg.c in Eggdrop 1.6.18, and possibly earlier, allows user-assisted, remote IRC servers to execute arbitrary code via a long private message.

Affected (11)

Products: Eggheads: Eggdrop Irc Bot

1 product

Eggdrop Irc Bot

Configuration A

11 vulnerable

Vulnerable Software	Affected Versions
Eggheads Eggdrop Irc Bot	version ≤ 1.6.18
Eggheads Eggdrop Irc Bot	Version 1.6.10
Eggheads Eggdrop Irc Bot	Version 1.6.11
Eggheads Eggdrop Irc Bot	Version 1.6.12
Eggheads Eggdrop Irc Bot	Version 1.6.13
Eggheads Eggdrop Irc Bot	Version 1.6.14
Eggheads Eggdrop Irc Bot	Version 1.6.15
Eggheads Eggdrop Irc Bot	Version 1.6.16
Eggheads Eggdrop Irc Bot	Version 1.6.17
Eggheads Eggdrop Irc Bot	Version 1.6.8
Eggheads Eggdrop Irc Bot	Version 1.6.9

References (34)

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=427157

Source: cve@mitre.org

http://osvdb.org/36237

Source: cve@mitre.org

http://secunia.com/advisories/25276

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/26727

Source: cve@mitre.org

http://secunia.com/advisories/26826

Source: cve@mitre.org

http://secunia.com/advisories/27989

Source: cve@mitre.org

http://secunia.com/advisories/28347

Source: cve@mitre.org

http://secunia.com/advisories/35690

Source: cve@mitre.org

http://security.gentoo.org/glsa/glsa-200709-07.xml

Source: cve@mitre.org

http://securitytracker.com/id?1018700

Source: cve@mitre.org

http://www.debian.org/security/2008/dsa-1448

Source: cve@mitre.org

http://www.debian.org/security/2009/dsa-1826

Source: cve@mitre.org

http://www.eggheads.org/bugzilla/show_bug.cgi?id=462

Source: cve@mitre.org

Exploit

http://www.mandriva.com/security/advisories?name=MDKSA-2007:175

Source: cve@mitre.org

http://www.securityfocus.com/bid/24070

Source: cve@mitre.org

https://www.redhat.com/archives/fedora-package-announce/2007-December/msg00336.html

Source: cve@mitre.org

https://www.redhat.com/archives/fedora-package-announce/2007-December/msg00348.html

Source: cve@mitre.org

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=427157

Source: af854a3a-2127-422b-91ae-364da2661108

http://osvdb.org/36237

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/25276

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/26727

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/26826

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/27989

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/28347

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/35690

Source: af854a3a-2127-422b-91ae-364da2661108

http://security.gentoo.org/glsa/glsa-200709-07.xml

Source: af854a3a-2127-422b-91ae-364da2661108

http://securitytracker.com/id?1018700

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.debian.org/security/2008/dsa-1448

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.debian.org/security/2009/dsa-1826

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.eggheads.org/bugzilla/show_bug.cgi?id=462

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

http://www.mandriva.com/security/advisories?name=MDKSA-2007:175

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/24070

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.redhat.com/archives/fedora-package-announce/2007-December/msg00336.html

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.redhat.com/archives/fedora-package-announce/2007-December/msg00348.html

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.