CVE-2007-5922: Bitchx

Medium severity, CVSS 5.0. EPSS: 1% chance of exploitation in the next 30 days.

The modules/mdop.m in the Cypress 1.0k script for BitchX, as downloaded from a distribution site in November 2007, contains an externally introduced backdoor that e-mails sensitive information (hostnames, usernames, and shell history) to a fixed address.

Affected products

• Bitchx Bitchx: any version
• Cypress Cypress: version 1.0k only

Published 2007-11-10. Last modified 2026-06-16.