https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2007-5922.htmlhttps://patchthecve.com/cve/CVE-2007-5922.htmlTue, 16 Jun 2026 22:47:02 +0000MEDIUM 5.0: The modules/mdop.m in the Cypress 1.0k script for BitchX, as downloaded from a distribution site in November 2007, contains an externally introduced backdoor that e-mails sensitive information (hostnames, usernames, and shell history) to a fixed address.https://patchthecve.com/cve/CVE-2007-5839.htmlhttps://patchthecve.com/cve/CVE-2007-5839.htmlTue, 16 Jun 2026 22:46:55 +0000MEDIUM 4.6: The e_hostname function in commands.c in BitchX 1.1a allows local users to overwrite arbitrary files via a symlink attack on temporary files when using the (1) HOSTNAME or (2) IRCHOST command.https://patchthecve.com/cve/CVE-2007-4584.htmlhttps://patchthecve.com/cve/CVE-2007-4584.htmlTue, 16 Jun 2026 22:44:22 +0000HIGH 10.0: Stack-based buffer overflow in BitchX 1.1 Final allows remote IRC servers to execute arbitrary code via a long string in a MODE command, related to the p_mode variable.https://patchthecve.com/cve/CVE-2007-3360.htmlhttps://patchthecve.com/cve/CVE-2007-3360.htmlTue, 16 Jun 2026 22:41:50 +0000HIGH 9.3: hook.c in BitchX 1.1-final allows remote IRC servers to execute arbitrary commands by sending a client certain data containing NICK and EXEC strings, which exceeds the bounds of a hash table, and injects an EXEC hook function that receives and executes shell commands.https://patchthecve.com/cve/CVE-2003-1450.htmlhttps://patchthecve.com/cve/CVE-2003-1450.htmlTue, 16 Jun 2026 22:04:27 +0000MEDIUM 5.0: BitchX 75p3 and 1.0c16 through 1.0c20cvs allows remote attackers to cause a denial of service (segmentation fault) via a malformed RPL_NAMREPLY numeric 353 message.https://patchthecve.com/cve/CVE-2003-0322.htmlhttps://patchthecve.com/cve/CVE-2003-0322.htmlTue, 16 Jun 2026 22:01:59 +0000MEDIUM 5.0: Integer overflow in BitchX IRC client 1.0-0c19 and earlier allows remote malicious IRC servers to cause a denial of service (crash).https://patchthecve.com/cve/CVE-2003-0321.htmlhttps://patchthecve.com/cve/CVE-2003-0321.htmlTue, 16 Jun 2026 22:01:59 +0000HIGH 7.5: Multiple buffer overflows in BitchX IRC client 1.0-0c19 and earlier allow remote malicious IRC servers to cause a denial of service (crash) and possibly execute arbitrary code via long hostnames, nicknames, or channel names, which are not properly handled by the functions (1) send_ctcp, (2) cannot_jhttps://patchthecve.com/cve/CVE-2003-0334.htmlhttps://patchthecve.com/cve/CVE-2003-0334.htmlTue, 16 Jun 2026 22:02:01 +0000LOW 2.1: BitchX IRC client 1.0c20cvs and earlier allows attackers to cause a denial of service (core dump) via certain channel mode changes that are not properly handled in names.c.https://patchthecve.com/cve/CVE-2001-0050.htmlhttps://patchthecve.com/cve/CVE-2001-0050.htmlTue, 16 Jun 2026 21:53:33 +0000HIGH 10.0: Buffer overflow in BitchX IRC client allows remote attackers to cause a denial of service and possibly execute arbitrary commands via an IP address that resolves to a long DNS hostname or domain name.