CVE-2007-2807

2007-05-2200:00:00

ubuntu.com

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.019 Low

EPSS

Percentile

88.7%

JSON

Stack-based buffer overflow in mod/server.mod/servrmsg.c in Eggdrop 1.6.18,
and possibly earlier, allows user-assisted, remote IRC servers to execute
arbitrary code via a long private message.

Bugs

<https://bugs.launchpad.net/ubuntu/+source/eggdrop/+bug/180974>

OSVersionArchitecturePackageVersionFilename
ubuntu6.06noarcheggdrop< 1.6.17-3sarge1build0.6.06.1UNKNOWN
ubuntu7.10noarcheggdrop< 1.6.18-1.1ubuntu1UNKNOWN
ubuntu8.04noarcheggdrop< 1.6.18-1.1ubuntu1UNKNOWN
ubuntu8.10noarcheggdrop< 1.6.18-1.1ubuntu1UNKNOWN
ubuntu9.04noarcheggdrop< 1.6.18-1.1ubuntu1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	6.06	noarch	eggdrop	< 1.6.17-3sarge1build0.6.06.1	UNKNOWN
ubuntu	7.10	noarch	eggdrop	< 1.6.18-1.1ubuntu1	UNKNOWN
ubuntu	8.04	noarch	eggdrop	< 1.6.18-1.1ubuntu1	UNKNOWN
ubuntu	8.10	noarch	eggdrop	< 1.6.18-1.1ubuntu1	UNKNOWN
ubuntu	9.04	noarch	eggdrop	< 1.6.18-1.1ubuntu1	UNKNOWN