CVE-2007-2807

MEDIUM 6.8CVE-2007-2807 · Published 22/05/2007 · updated 16/06/2026

In short

CVE-2007-2807 is a MEDIUM (CVSS 6.8) vulnerability affecting eggdrop irc bot (eggheads).
Chance of exploitation in the next 30 days (EPSS): 10.0%, higher than 95.6% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
eggdrop irc bot eggheads	`= 1.6.10= 1.6.11= 1.6.12= 1.6.13= 1.6.14= 1.6.15= 1.6.16= 1.6.17= 1.6.8= 1.6.9≤ 1.6.18`	No fix yet

Description

Stack-based buffer overflow in mod/server.mod/servrmsg.c in Eggdrop 1.6.18, and possibly earlier, allows user-assisted, remote IRC servers to execute arbitrary code via a long private message.

References

bugs.debian.org/cgi-bin/bugreport.cgi
osvdb.org/36237
secunia.com/advisories/25276 · Vendor Advisory
secunia.com/advisories/26727
secunia.com/advisories/26826
secunia.com/advisories/27989
secunia.com/advisories/28347
secunia.com/advisories/35690
security.gentoo.org/glsa/glsa-200709-07.xml
securitytracker.com/id
debian.org/security/2008/dsa-1448
debian.org/security/2009/dsa-1826
eggheads.org/bugzilla/show_bug.cgi · Exploit
mandriva.com/security/advisories
securityfocus.com/bid/24070
redhat.com/archives/fedora-package-announce/2007-December/msg00336.html

More vulnerabilities in eggdrop irc bot

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free