CVE-2007-5922

BitchX Cypress 1.0k - Unauthorized Sensitive Information Exposure via Backdoored mdop.m Module

Title source: llm
STIX 2.1

Description

The modules/mdop.m in the Cypress 1.0k script for BitchX, as downloaded from a distribution site in November 2007, contains an externally introduced backdoor that e-mails sensitive information (hostnames, usernames, and shell history) to a fixed address.

References (4)

Core 4
Core References
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/483350/100/0/threaded
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/27556
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/26372
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://osvdb.org/42073

Scores

EPSS 0.0104
EPSS Percentile 60.1%

Details

CWE
CWE-200
Status published
Products (2)
bitchx/bitchx
cypress/cypress 1.0k
Published Nov 10, 2007
Tracked Since Feb 18, 2026