CVE-2007-5839: Bitchx

Medium severity, CVSS 4.6. EPSS: 0.4% chance of exploitation in the next 30 days.

The e_hostname function in commands.c in BitchX 1.1a allows local users to overwrite arbitrary files via a symlink attack on temporary files when using the (1) HOSTNAME or (2) IRCHOST command.

Affected products

• Bitchx Bitchx: version 1.1a only

Published 2007-11-06. Last modified 2026-06-16.