CVE-2000-0594

BitchX IRC Client 75p1/75p3/1.0 c16 - '/INVITE' Format String

Severity Score

5.0

*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

BitchX IRC client does not properly cleanse an untrusted format string, which allows remote attackers to cause a denial of service via an invite to a channel whose name includes special formatting characters.

*Credits: N/A

CVSS Scores

NISTv2 5.0

Attack Vector

Network

Attack Complexity

Low

Authentication

None

Confidentiality

None

Integrity

None

Availability

Partial

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2000-07-04 CVE Published
2000-07-05 First Exploit
2000-07-19 CVE Reserved
2023-03-07 EPSS Updated
2024-08-08 CVE Updated
---------- Exploited in Wild
---------- KEV Due Date

CWE

CAPEC

References (10)

URL	Tag	Source
http://archives.neohapsis.com/archives/bugtraq/2000-07/0026.html	Mailing List
http://archives.neohapsis.com/archives/bugtraq/2000-07/0098.html	Mailing List
http://archives.neohapsis.com/archives/bugtraq/2000-07/0105.html	Mailing List
http://archives.neohapsis.com/archives/vuln-dev/2000-q3/0018.html	Mailing List
http://www.securityfocus.com/bid/1436	Vdb Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/4897	Vdb Entry

URL	Date	SRC
https://www.exploit-db.com/exploits/20060	2000-07-05

URL	Date	SRC

URL	Date	SRC
http://archives.neohapsis.com/archives/freebsd/2000-07/0042.html	2017-10-10
http://www.calderasystems.com/support/security/advisories/CSSA-2000-022.0.txt	2017-10-10
http://www.redhat.com/support/errata/RHSA-2000-042.html	2017-10-10

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Caldera Search vendor "Caldera"		Openlinux Desktop Search vendor "Caldera" for product "Openlinux Desktop"				2.3 Search vendor "Caldera" for product "Openlinux Desktop" and version "2.3"		-		Affected
Caldera Search vendor "Caldera"		Openlinux Ebuilder Search vendor "Caldera" for product "Openlinux Ebuilder"				2.3 Search vendor "Caldera" for product "Openlinux Ebuilder" and version "2.3"		-		Affected
Caldera Search vendor "Caldera"		Openlinux Edesktop Search vendor "Caldera" for product "Openlinux Edesktop"				2.4 Search vendor "Caldera" for product "Openlinux Edesktop" and version "2.4"		-		Affected
Caldera Search vendor "Caldera"		Openlinux Eserver Search vendor "Caldera" for product "Openlinux Eserver"				2.3 Search vendor "Caldera" for product "Openlinux Eserver" and version "2.3"		-		Affected
Freebsd Search vendor "Freebsd"		Freebsd Search vendor "Freebsd" for product "Freebsd"				3.5 Search vendor "Freebsd" for product "Freebsd" and version "3.5"		-		Affected
Freebsd Search vendor "Freebsd"		Freebsd Search vendor "Freebsd" for product "Freebsd"				4.0 Search vendor "Freebsd" for product "Freebsd" and version "4.0"		-		Affected
Mandrakesoft Search vendor "Mandrakesoft"		Mandrake Linux Search vendor "Mandrakesoft" for product "Mandrake Linux"				2007 Search vendor "Mandrakesoft" for product "Mandrake Linux" and version "2007"		-		Affected