blogs.23.nu
http://blogs.23.nu/ilja/stories/14493 CVE-2007-1397
FiSH-irssi 0.99 - Evil ircd Buffer Overflow
Record summary
CVE-2007-1397 has a selected CVSS score of 10.0; EIP currently links 2 catalogued exploits.
Description
Multiple stack-based buffer overflows in the (1) ExtractRnick and (2) decrypt_topic_332 functions in FiSH allow remote attackers to execute arbitrary code via long strings.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 2
Proofs of concept
2Catalogued exploits
ExploitDBFiSH-irssi 0.99 - Evil ircd Buffer OverflowExploitDB exploitby Caleb James DeLisleNot analyzed1 file
ExploitDBFiSH-irssi - Multiple Remote Buffer Overflow VulnerabilitiesExploitDB exploitby ilja van sprundelNot analyzed1 file
References
724495Third-party advisory
http://secunia.com/advisories/24495 8216Third-party advisory
http://securityreason.com/securityalert/8216 22880vdb entry
http://www.securityfocus.com/bid/22880 ADV-2007-0910vdb entry
http://www.vupen.com/english/advisories/2007/0910 fish-multiple-bo(32892)vdb entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/32892 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2007-1397