CVE-2007-2807
Stack-based buffer overflow in mod/server.mod/servrmsg.c in Eggdrop 1.6.18, and possibly earlier,...
Stack-based buffer overflow in mod/server.mod/servrmsg.c in Eggdrop 1.6.18, and possibly earlier, allows user-assisted, remote IRC servers to execute arbitrary code via a long private message.
Exploit likelihood
What each source reports
NVD Score used
Stack-based buffer overflow in mod/server.mod/servrmsg.c in Eggdrop 1.6.18, and possibly earlier, allows user-assisted, remote IRC servers to execute arbitrary code via a long private message.
- Record
CVE-2007-2807- CVSS 2.0
- 6.8 Medium
AV:N/AC:M/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
Stack-based buffer overflow in mod/server.mod/servrmsg.c in Eggdrop 1.6.18, and possibly earlier, allows user-assisted, remote IRC servers to execute arbitrary code via a long private message.
- Record
CVE-2007-2807- Updated
- 2026-11-02
EUVDEUVD-2007-2799 No score
Stack-based buffer overflow in mod/server.mod/servrmsg.c in Eggdrop 1.6.18, and possibly earlier, allows user-assisted, remote IRC servers to execute arbitrary code via a long private message.
- Record
EUVD-2007-2799- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-p35w-cvx7-7v49 No score
Stack-based buffer overflow in mod/server.mod/servrmsg.c in Eggdrop 1.6.18, and possibly earlier,...
Stack-based buffer overflow in mod/server.mod/servrmsg.c in Eggdrop 1.6.18, and possibly earlier, allows user-assisted, remote IRC servers to execute arbitrary code via a long private message.
- Record
GHSA-p35w-cvx7-7v49- Updated
- 2026-11-02
OSV No score
Stack-based buffer overflow in mod/server.mod/servrmsg.c in Eggdrop 1.6.18, and possibly earlier, allows user-assisted, remote IRC servers to execute arbitrary code via a long private message.
- Record
CVE-2007-2807- Updated
- 2026-11-02
OSVDEBIAN-CVE-2007-2807 No score
Stack-based buffer overflow in mod/server.mod/servrmsg.c in Eggdrop 1.6.18, and possibly earlier, allows user-assisted, remote IRC servers to execute arbitrary code via a long private message.
- Record
DEBIAN-CVE-2007-2807- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
eggdropDebian:12 |
before 1.6.18-1.1 | 1.6.18-1.1 |
eggdropDebian:13 |
before 1.6.18-1.1 | 1.6.18-1.1 |
eggdropDebian:14 |
before 1.6.18-1.1 | 1.6.18-1.1 |
eggdropDebian:4.0 |
before 1.6.18-1etch1, plus listed versions 1.6.18-1 |
1.6.18-1etch1 |
eggdropDebian:3.1 |
before 1.6.17-3sarge1, plus listed versions 1.6.17-3 |
1.6.17-3sarge1 |
eggdropDebian:4.0 |
before 1.6.18-1etch2, plus listed versions 1.6.18-11.6.18-1etch1 |
1.6.18-1etch2 |
eggdropDebian:5.0 |
before 1.6.19-1.1+lenny1, plus listed versions 1.6.19-1.1 |
1.6.19-1.1+lenny1 |
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Eggdrop Server Module Message Handling - Remote Buffer Overflow | 2007-10-10 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| affected, aliases, exploits, facts, references, title | Exploit-DB, GitHub Advisories, OSV | |
| first indexed | CVE List, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2007-2807 is a medium vulnerability (CVSS 6.8) in Eggheads Eggdrop Irc Bot, published May 22, 2007. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 9.98%, the 95th percentile. Fixed in eggdrop 1.6.18-1.1.
References
secunia.com/advisories/25276
mandriva.com/security/advisories?name=MDKSA-2007:175
securityfocus.com/bid/24070
security.gentoo.org/glsa/glsa-200709-07.xml
redhat.com/archives/fedora-package-announce/2007-December/msg00348.html
Show 14 moreShow less
securitytracker.com/id?1018700
eggheads.org/bugzilla/show_bug.cgi?id=462
debian.org/security/2008/dsa-1448
osvdb.org/36237
bugs.debian.org/cgi-bin/bugreport.cgi?bug=427157
nvd.nist.gov/vuln/detail/CVE-2007-2807
github.com/advisories/GHSA-p35w-cvx7-7v49
security-tracker.debian.org/tracker/CVE-2007-2807