Description
The modules/mdop.m in the Cypress 1.0k script for BitchX, as downloaded from a distribution site in November 2007, contains an externally introduced backdoor that e-mails sensitive information (hostnames, usernames, and shell history) to a fixed address.
References
- 20071106 Cypress BX script backdoored? mailing-list
- 27556 third-party-advisory
- 26372 vdb-entry
- 42073 vdb-entry