CVE-2007-2807

Eggdrop <1.6.18 - Buffer Overflow

Title source: llm

Description

Stack-based buffer overflow in mod/server.mod/servrmsg.c in Eggdrop 1.6.18, and possibly earlier, allows user-assisted, remote IRC servers to execute arbitrary code via a long private message.

Exploits (1)

exploitdb WORKING POC VERIFIED

by bangus/magnum · cremotelinux

https://www.exploit-db.com/exploits/4514

View Code ZIP pw:eip

References (17)

[Issue Tracking] http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=427157

[Vendor Advisory] http://secunia.com/advisories/25276

[Exploit] http://www.eggheads.org/bugzilla/show_bug.cgi?id=462

[Vendor Advisory] http://www.mandriva.com/security/advisories?name=MDKSA-2007:175

[Vendor Advisory] https://www.redhat.com/archives/fedora-package-announce/2007-December/msg00336.html

[Vendor Advisory] https://www.redhat.com/archives/fedora-package-announce/2007-December/msg00348.html

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/24070

[Third Party Advisory] http://www.debian.org/security/2008/dsa-1448

[Third Party Advisory] http://www.debian.org/security/2009/dsa-1826

[Third Party Advisory] http://security.gentoo.org/glsa/glsa-200709-07.xml

[Third Party Advisory, VDB Entry] http://osvdb.org/36237

[Third Party Advisory, VDB Entry] http://securitytracker.com/id?1018700

[Third Party Advisory] http://secunia.com/advisories/26727

[Third Party Advisory] http://secunia.com/advisories/26826

[Third Party Advisory] http://secunia.com/advisories/27989

[Third Party Advisory] http://secunia.com/advisories/28347

[Third Party Advisory] http://secunia.com/advisories/35690

Scores

EPSS 0.2307

EPSS Percentile 95.9%

Details

Status published

Products (11)

eggheads/eggdrop_irc_bot 1.6.8

eggheads/eggdrop_irc_bot 1.6.9

eggheads/eggdrop_irc_bot 1.6.10

eggheads/eggdrop_irc_bot 1.6.11

eggheads/eggdrop_irc_bot 1.6.12

eggheads/eggdrop_irc_bot 1.6.13

eggheads/eggdrop_irc_bot 1.6.14

eggheads/eggdrop_irc_bot 1.6.15

eggheads/eggdrop_irc_bot 1.6.16

eggheads/eggdrop_irc_bot 1.6.17

... and 1 more

Published May 22, 2007

Tracked Since Feb 18, 2026