BitchX Trojan Horse Vulnerability
BID:7333
Info
BitchX Trojan Horse Vulnerability
| Bugtraq ID: | 7333 |
| Class: | Unknown |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Apr 13 2003 12:00AM |
| Updated: | Apr 13 2003 12:00AM |
| Credit: | This issue was reported by "Micha Szwaczko" <[email protected]> |
| Vulnerable: |
BitchX IRC Client 1.0 c19 |
| Not Vulnerable: | |
Discussion
BitchX Trojan Horse Vulnerability
It has been announced that the server hosting BitchX, www.bitchx.org, was compromised recently. It has been reported that the intruder made modifications to the source code of BitchX to include trojan horse code. Downloads of the source code of BitchX from www.bitchx.org, and mirrors, likely contain the trojan code.
Reports say that the trojan will run once upon compilation of BitchX. Once the trojan is executed, it attempts to connect to host 207.178.61.5 on port 6667.
The trojan horse modifications can be found in the configure script.
This BID will be updated as more information becomes available.
It has been announced that the server hosting BitchX, www.bitchx.org, was compromised recently. It has been reported that the intruder made modifications to the source code of BitchX to include trojan horse code. Downloads of the source code of BitchX from www.bitchx.org, and mirrors, likely contain the trojan code.
Reports say that the trojan will run once upon compilation of BitchX. Once the trojan is executed, it attempts to connect to host 207.178.61.5 on port 6667.
The trojan horse modifications can be found in the configure script.
This BID will be updated as more information becomes available.
Exploit / POC
BitchX Trojan Horse Vulnerability
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution / Fix
BitchX Trojan Horse Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.