| Package | Affected versions | Patched versions |
|---|---|---|
| bitchx | = 1.1-final |
hook.c in BitchX 1.1-final allows remote IRC servers to execute arbitrary commands by sending a client certain data containing NICK and EXEC strings, which exceeds the bounds of a hash table, and injects an EXEC hook function that receives and executes shell commands.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free