BitchX 1.0c19 IRC Client Backdoored

JRAC writes "A recent Bugtraq submission has indicated that the popular IRC client, BitchX, contains a backdoor. So far, only certain 1.0c19 files, downloaded from ftp.bitchx.com are reported to contain the malicious code. The BitchX developers have been notified, so hopefully a fix will be issued soon. Looks like irssi wasn't the only one ;)"

In other news ...

[NASAKnight]

Local inmates confirmed that there was a problem with people entering into BitchX's backdoor. The suspect is a large man calling himself 'big mamma.'

terminology

[Anonymous Coward]

Not only is this thing called "BitchX", but it also has a "backdoor". I'm not a vulgar person, but this is too much

ah, the good ol' days

[MattW]

This reminds me of the good old days, when people distributed like 20 different scripts for the irc2 client, all of which had some backdoor or another. Most of them listened for ctcp commands and would pass them directly to shell. CTCP GROK JUPE CMD ORD -- bonus points to anyone who can name all 4 scripts that had those backdoor commands. Then there were amusing tidbits like scripts that would flood anyone using the authors nick without the right hostmask. Then there was the 'Folder's Crystals' script -- it set your display to off, so you saw nothing even while you joined a channel and were saying, "I've just had all my files secretly replaced by folgers_crystals... let's see what happens!" (meanwhile, the script was executing rm -rf ~).

Of course, back then, you could blame people for running something they didn't understand, since it was on the order of getting a whack-a-bill game by email and just running it, whereas tainted downloads aren't quite as shameful, but ah, it does bring back the memories of the Wild Days of irc...

Enough talk

[WildBeast]

Grow up, nothing is perfectly secure. Let's stop arguing which OS is vulnerable and find the evil do-ers who did this. Let's smoke them out from there parents basement and deliver a Slashdot can of whoop ass.

If you were using a Trusted Computing machine . .

[vegetablespork]

. . . you wouldn't be vulnerable to back doors inserted by rogue programmers in configure scripts. You would only be vulnerable to back doors authorized by Microsoft and the U.S. Government to prevent piracy and terrorism.

Re:Enough talk

[idiot900]

deliver a Slashdot can of whoop ass.

What would that be exactly? Sending too many visitors to their website?

Backdoored?

[Per Wigren]

Isn't it the BitchX who is supposed to be backdoored, not her client?