nvd-json-data-feeds/CVE-2007/CVE-2007-59xx/CVE-2007-5922.json

{
  "id": "CVE-2007-5922",
  "sourceIdentifier": "cve@mitre.org",
  "published": "2007-11-10T02:46:00.000",
  "lastModified": "2024-11-21T00:38:57.197",
  "vulnStatus": "Modified",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "The modules/mdop.m in the Cypress 1.0k script for BitchX, as downloaded from a distribution site in November 2007, contains an externally introduced backdoor that e-mails sensitive information (hostnames, usernames, and shell history) to a fixed address."
    },
    {
      "lang": "es",
      "value": "El modules/mdop.m en la secuencia de comandos Cypress 1.0k  para el BitchX, como la descargada en el sitio de distribuci\u00f3n en Noviembre de 2007, contiene una puerta trasera introducida externamente, que env\u00eda un correo electr\u00f3nico con informaci\u00f3n sensible (nombre de host, nombre de usuarios y el hist\u00f3rico del shell) a una direcci\u00f3n determinada."
    }
  ],
  "metrics": {
    "cvssMetricV2": [
      {
        "source": "nvd@nist.gov",
        "type": "Primary",
        "cvssData": {
          "version": "2.0",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
          "baseScore": 5.0,
          "accessVector": "NETWORK",
          "accessComplexity": "LOW",
          "authentication": "NONE",
          "confidentialityImpact": "PARTIAL",
          "integrityImpact": "NONE",
          "availabilityImpact": "NONE"
        },
        "baseSeverity": "MEDIUM",
        "exploitabilityScore": 10.0,
        "impactScore": 2.9,
        "acInsufInfo": false,
        "obtainAllPrivilege": false,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "weaknesses": [
    {
      "source": "nvd@nist.gov",
      "type": "Primary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-200"
        }
      ]
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "operator": "OR",
          "negate": false,
          "cpeMatch": [
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:bitchx:bitchx:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "27E8D691-59CD-4C35-8FB0-3B41A6858984"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:cypress:cypress:1.0k:*:*:*:*:*:*:*",
              "matchCriteriaId": "C8046282-5569-415A-A385-07AF27365803"
            }
          ]
        }
      ]
    }
  ],
  "references": [
    {
      "url": "http://osvdb.org/42073",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://secunia.com/advisories/27556",
      "source": "cve@mitre.org",
      "tags": [
        "Vendor Advisory"
      ]
    },
    {
      "url": "http://www.securityfocus.com/archive/1/483350/100/0/threaded",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/26372",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://osvdb.org/42073",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/advisories/27556",
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ]
    },
    {
      "url": "http://www.securityfocus.com/archive/1/483350/100/0/threaded",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/26372",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ]
}