CVE-2007-3360: Bitchx

High severity, CVSS 9.3. EPSS: 7.5% chance of exploitation in the next 30 days.

hook.c in BitchX 1.1-final allows remote IRC servers to execute arbitrary commands by sending a client certain data containing NICK and EXEC strings, which exceeds the bounds of a hash table, and injects an EXEC hook function that receives and executes shell commands.

Affected products

• Bitchx Bitchx: version 1.1-final only

Published 2007-06-22. Last modified 2026-06-16.