Eggdrop Server Module Message Handling Remote Buffer Overflow Vulnerability

Bugtraq ID:	24070
Class:	Boundary Condition Error
CVE:	CVE-2007-2807
Remote:	Yes
Local:	No
Published:	May 21 2007 12:00AM
Updated:	Apr 13 2015 09:52PM
Credit:	Bow Sineath is credited with the discovery of this vulnerability
Vulnerable:	Redhat Fedora 7 Mandriva Linux Mandrake 2007.1 x86_64 Mandriva Linux Mandrake 2007.1 Mandriva Linux Mandrake 2007.0 x86_64 Mandriva Linux Mandrake 2007.0 MandrakeSoft Corporate Server 3.0 x86_64 MandrakeSoft Corporate Server 3.0 Gentoo Linux Eggheads Eggdrop IRC bot 1.6.18 Eggheads Eggdrop IRC bot 1.6.17 Eggheads Eggdrop IRC bot 1.6.15 Eggheads Eggdrop IRC bot 1.6.14 Eggheads Eggdrop IRC bot 1.6.13 Eggheads Eggdrop IRC bot 1.6.12 Eggheads Eggdrop IRC bot 1.6.11 Eggheads Eggdrop IRC bot 1.6.10 Debian Linux 3.1 sparc Debian Linux 3.1 s/390 Debian Linux 3.1 ppc Debian Linux 3.1 mipsel Debian Linux 3.1 mips Debian Linux 3.1 m68k Debian Linux 3.1 ia-64 Debian Linux 3.1 ia-32 Debian Linux 3.1 hppa Debian Linux 3.1 arm Debian Linux 3.1 amd64 Debian Linux 3.1 alpha Debian Linux 3.1 Debian Linux 5.0 sparc Debian Linux 5.0 s/390 Debian Linux 5.0 powerpc Debian Linux 5.0 mipsel Debian Linux 5.0 mips Debian Linux 5.0 m68k Debian Linux 5.0 ia-64 Debian Linux 5.0 ia-32 Debian Linux 5.0 hppa Debian Linux 5.0 armel Debian Linux 5.0 arm Debian Linux 5.0 amd64 Debian Linux 5.0 alpha Debian Linux 5.0 Debian Linux 4.0 sparc Debian Linux 4.0 s/390 Debian Linux 4.0 powerpc Debian Linux 4.0 mipsel Debian Linux 4.0 mips Debian Linux 4.0 m68k Debian Linux 4.0 ia-64 Debian Linux 4.0 ia-32 Debian Linux 4.0 hppa Debian Linux 4.0 armel Debian Linux 4.0 arm Debian Linux 4.0 amd64 Debian Linux 4.0 alpha Debian Linux 4.0
Not Vulnerable:

Eggdrop Server Module Message Handling Remote Buffer Overflow Vulnerability

Eggdrop Server Module is prone to a remote buffer-overflow vulnerability because the application fails to bounds-check user-supplied data before copying it into an insufficiently sized buffer.

An attacker can exploit this issue to execute arbitrary code within the context of the affected application. Failed exploit attempts will result in a denial-of-service condition.

Eggdrop 1.6.18 is known to be vulnerable; other versions may be affected as well.

Eggdrop Server Module Message Handling Remote Buffer Overflow Vulnerability

The following expolit is available:

• /data/vulnerabilities/exploits/Eggdrop_24070.c

Eggdrop Server Module Message Handling Remote Buffer Overflow Vulnerability

Solution:
Updates are available. Please see the references for more information.


Debian Linux 4.0 arm

• Debian eggdrop-data_1.6.18-1etch2_all.deb
  http://security.debian.org/pool/updates/main/e/eggdrop/eggdrop-data_1. 6.18-1etch2_all.deb


• Debian eggdrop_1.6.18-1etch2_arm.deb
  http://security.debian.org/pool/updates/main/e/eggdrop/eggdrop_1.6.18- 1etch2_arm.deb

Debian Linux 5.0 ia-64

• Debian eggdrop-data_1.6.19-1.1+lenny1_all.deb
  http://security.debian.org/pool/updates/main/e/eggdrop/eggdrop-data_1. 6.19-1.1+lenny1_all.deb


• Debian eggdrop_1.6.19-1.1+lenny1_ia64.deb
  http://security.debian.org/pool/updates/main/e/eggdrop/eggdrop_1.6.19- 1.1+lenny1_ia64.deb

Debian Linux 4.0 powerpc

• Debian eggdrop-data_1.6.18-1etch2_all.deb
  http://security.debian.org/pool/updates/main/e/eggdrop/eggdrop-data_1. 6.18-1etch2_all.deb


• Debian eggdrop_1.6.18-1etch2_powerpc.deb
  http://security.debian.org/pool/updates/main/e/eggdrop/eggdrop_1.6.18- 1etch2_powerpc.deb

Debian Linux 4.0 m68k

• Debian eggdrop-data_1.6.18-1etch2_all.deb
  http://security.debian.org/pool/updates/main/e/eggdrop/eggdrop-data_1. 6.18-1etch2_all.deb

Debian Linux 5.0 alpha

• Debian eggdrop-data_1.6.19-1.1+lenny1_all.deb
  http://security.debian.org/pool/updates/main/e/eggdrop/eggdrop-data_1. 6.19-1.1+lenny1_all.deb


• Debian eggdrop_1.6.19-1.1+lenny1_alpha.deb
  http://security.debian.org/pool/updates/main/e/eggdrop/eggdrop_1.6.19- 1.1+lenny1_alpha.deb

Debian Linux 5.0 ia-32

• Debian eggdrop-data_1.6.19-1.1+lenny1_all.deb
  http://security.debian.org/pool/updates/main/e/eggdrop/eggdrop-data_1. 6.19-1.1+lenny1_all.deb


• Debian eggdrop_1.6.19-1.1+lenny1_i386.deb
  http://security.debian.org/pool/updates/main/e/eggdrop/eggdrop_1.6.19- 1.1+lenny1_i386.deb

Debian Linux 5.0 s/390

• Debian eggdrop-data_1.6.19-1.1+lenny1_all.deb
  http://security.debian.org/pool/updates/main/e/eggdrop/eggdrop-data_1. 6.19-1.1+lenny1_all.deb


• Debian eggdrop_1.6.19-1.1+lenny1_s390.deb
  http://security.debian.org/pool/updates/main/e/eggdrop/eggdrop_1.6.19- 1.1+lenny1_s390.deb

Debian Linux 5.0 mipsel

• Debian eggdrop-data_1.6.19-1.1+lenny1_all.deb
  http://security.debian.org/pool/updates/main/e/eggdrop/eggdrop-data_1. 6.19-1.1+lenny1_all.deb


• Debian eggdrop_1.6.19-1.1+lenny1_mipsel.deb
  http://security.debian.org/pool/updates/main/e/eggdrop/eggdrop_1.6.19- 1.1+lenny1_mipsel.deb

Debian Linux 4.0 amd64

• Debian eggdrop-data_1.6.18-1etch2_all.deb
  http://security.debian.org/pool/updates/main/e/eggdrop/eggdrop-data_1. 6.18-1etch2_all.deb


• Debian eggdrop_1.6.18-1etch2_amd64.deb
  http://security.debian.org/pool/updates/main/e/eggdrop/eggdrop_1.6.18- 1etch2_amd64.deb

Debian Linux 4.0 ia-32

• Debian eggdrop-data_1.6.18-1etch2_all.deb
  http://security.debian.org/pool/updates/main/e/eggdrop/eggdrop-data_1. 6.18-1etch2_all.deb


• Debian eggdrop_1.6.18-1etch2_i386.deb
  http://security.debian.org/pool/updates/main/e/eggdrop/eggdrop_1.6.18- 1etch2_i386.deb

Debian Linux 5.0 hppa

• Debian eggdrop-data_1.6.19-1.1+lenny1_all.deb
  http://security.debian.org/pool/updates/main/e/eggdrop/eggdrop-data_1. 6.19-1.1+lenny1_all.deb


• Debian eggdrop_1.6.19-1.1+lenny1_hppa.deb
  http://security.debian.org/pool/updates/main/e/eggdrop/eggdrop_1.6.19- 1.1+lenny1_hppa.deb

Debian Linux 4.0 hppa

• Debian eggdrop-data_1.6.18-1etch2_all.deb
  http://security.debian.org/pool/updates/main/e/eggdrop/eggdrop-data_1. 6.18-1etch2_all.deb


• Debian eggdrop_1.6.18-1etch2_hppa.deb
  http://security.debian.org/pool/updates/main/e/eggdrop/eggdrop_1.6.18- 1etch2_hppa.deb

Debian Linux 4.0 sparc

• Debian eggdrop-data_1.6.18-1etch2_all.deb
  http://security.debian.org/pool/updates/main/e/eggdrop/eggdrop-data_1. 6.18-1etch2_all.deb


• Debian eggdrop_1.6.18-1etch2_sparc.deb
  http://security.debian.org/pool/updates/main/e/eggdrop/eggdrop_1.6.18- 1etch2_sparc.deb

Debian Linux 4.0 s/390

• Debian eggdrop-data_1.6.18-1etch2_all.deb
  http://security.debian.org/pool/updates/main/e/eggdrop/eggdrop-data_1. 6.18-1etch2_all.deb


• Debian eggdrop_1.6.18-1etch2_s390.deb
  http://security.debian.org/pool/updates/main/e/eggdrop/eggdrop_1.6.18- 1etch2_s390.deb

Debian Linux 5.0 m68k

• Debian eggdrop-data_1.6.19-1.1+lenny1_all.deb
  http://security.debian.org/pool/updates/main/e/eggdrop/eggdrop-data_1. 6.19-1.1+lenny1_all.deb

Debian Linux 5.0 arm

• Debian eggdrop-data_1.6.19-1.1+lenny1_all.deb
  http://security.debian.org/pool/updates/main/e/eggdrop/eggdrop-data_1. 6.19-1.1+lenny1_all.deb


• Debian eggdrop_1.6.19-1.1+lenny1_arm.deb
  http://security.debian.org/pool/updates/main/e/eggdrop/eggdrop_1.6.19- 1.1+lenny1_arm.deb

Debian Linux 4.0 alpha

• Debian eggdrop-data_1.6.18-1etch2_all.deb
  http://security.debian.org/pool/updates/main/e/eggdrop/eggdrop-data_1. 6.18-1etch2_all.deb


• Debian eggdrop_1.6.18-1etch2_alpha.deb
  http://security.debian.org/pool/updates/main/e/eggdrop/eggdrop_1.6.18- 1etch2_alpha.deb

Debian Linux 4.0 armel

• Debian eggdrop-data_1.6.18-1etch2_all.deb
  http://security.debian.org/pool/updates/main/e/eggdrop/eggdrop-data_1. 6.18-1etch2_all.deb

Debian Linux 5.0 armel

• Debian eggdrop-data_1.6.19-1.1+lenny1_all.deb
  http://security.debian.org/pool/updates/main/e/eggdrop/eggdrop-data_1. 6.19-1.1+lenny1_all.deb


• Debian eggdrop_1.6.19-1.1+lenny1_armel.deb
  http://security.debian.org/pool/updates/main/e/eggdrop/eggdrop_1.6.19- 1.1+lenny1_armel.deb

Debian Linux 5.0

• Debian eggdrop-data_1.6.19-1.1+lenny1_all.deb
  http://security.debian.org/pool/updates/main/e/eggdrop/eggdrop-data_1. 6.19-1.1+lenny1_all.deb

Debian Linux 4.0

• Debian eggdrop-data_1.6.18-1etch2_all.deb
  http://security.debian.org/pool/updates/main/e/eggdrop/eggdrop-data_1. 6.18-1etch2_all.deb

Debian Linux 4.0 mipsel

• Debian eggdrop-data_1.6.18-1etch2_all.deb
  http://security.debian.org/pool/updates/main/e/eggdrop/eggdrop-data_1. 6.18-1etch2_all.deb


• Debian eggdrop_1.6.18-1etch2_mipsel.deb
  http://security.debian.org/pool/updates/main/e/eggdrop/eggdrop_1.6.18- 1etch2_mipsel.deb

Debian Linux 5.0 amd64

• Debian eggdrop-data_1.6.19-1.1+lenny1_all.deb
  http://security.debian.org/pool/updates/main/e/eggdrop/eggdrop-data_1. 6.19-1.1+lenny1_all.deb


• Debian eggdrop_1.6.19-1.1+lenny1_amd64.deb
  http://security.debian.org/pool/updates/main/e/eggdrop/eggdrop_1.6.19- 1.1+lenny1_amd64.deb

Debian Linux 5.0 mips

• Debian eggdrop-data_1.6.19-1.1+lenny1_all.deb
  http://security.debian.org/pool/updates/main/e/eggdrop/eggdrop-data_1. 6.19-1.1+lenny1_all.deb


• Debian eggdrop_1.6.19-1.1+lenny1_mips.deb
  http://security.debian.org/pool/updates/main/e/eggdrop/eggdrop_1.6.19- 1.1+lenny1_mips.deb

Debian Linux 5.0 powerpc

• Debian eggdrop-data_1.6.19-1.1+lenny1_all.deb
  http://security.debian.org/pool/updates/main/e/eggdrop/eggdrop-data_1. 6.19-1.1+lenny1_all.deb


• Debian eggdrop_1.6.19-1.1+lenny1_powerpc.deb
  http://security.debian.org/pool/updates/main/e/eggdrop/eggdrop_1.6.19- 1.1+lenny1_powerpc.deb

Debian Linux 4.0 ia-64

• Debian eggdrop-data_1.6.18-1etch2_all.deb
  http://security.debian.org/pool/updates/main/e/eggdrop/eggdrop-data_1. 6.18-1etch2_all.deb


• Debian eggdrop_1.6.18-1etch2_ia64.deb
  http://security.debian.org/pool/updates/main/e/eggdrop/eggdrop_1.6.18- 1etch2_ia64.deb

Debian Linux 4.0 mips

• Debian eggdrop-data_1.6.18-1etch2_all.deb
  http://security.debian.org/pool/updates/main/e/eggdrop/eggdrop-data_1. 6.18-1etch2_all.deb


• Debian eggdrop_1.6.18-1etch2_mips.deb
  http://security.debian.org/pool/updates/main/e/eggdrop/eggdrop_1.6.18- 1etch2_mips.deb

Debian Linux 5.0 sparc

• Debian eggdrop-data_1.6.19-1.1+lenny1_all.deb
  http://security.debian.org/pool/updates/main/e/eggdrop/eggdrop-data_1. 6.19-1.1+lenny1_all.deb


• Debian eggdrop_1.6.19-1.1+lenny1_sparc.deb
  http://security.debian.org/pool/updates/main/e/eggdrop/eggdrop_1.6.19- 1.1+lenny1_sparc.deb

Eggdrop Server Module Message Handling Remote Buffer Overflow Vulnerability

References:

• Bugzilla Bug 462 multiple buffer overflows in server module (Eggheads)
  
• Eggdrop IRC bot Homepage (Eggheads)