Editing BitchX (section)

== Security ==
It was known that early versions of BitchX were vulnerable to a [[denial-of-service attack]] in that they could be caused to crash by passing specially-crafted strings as arguments to certain IRC commands. This was before [[format string attack]]s became a well-known class of vulnerability.<ref>{{cite book |title=Hack Proofing Your Network |author=Ryan Russell |year=2002 |publisher=Syngress |page=329 |isbn=9781597496087 |url=https://books.google.com/books?id=v8bp4mvpYc4C&dq=BitchX&pg=RA2-PA329}}</ref>

The previous version of BitchX, released in 2004, has security problems allowing remote IRC servers to execute arbitrary code on the client's machine ([http://nvd.nist.gov/nvd.cfm?cvename=CVE-2007-3360 CVE-2007-3360], [http://nvd.nist.gov/nvd.cfm?cvename=CVE-2007-4584 CVE-2007-4584]).

On April 26, 2009, [[Slackware]] removed BitchX from its distribution, citing the numerous unresolved security issues.<ref>{{cite web|url=http://www.slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.285737 |title=The Slackware Linux Project: Slackware Security Advisories |publisher=Slackware.com |date=2009-04-26 |access-date=2011-07-09}}</ref>

The aforementioned vulnerabilities were fixed in the sources for the 1.2 release.<ref>{{cite web|url=https://sourceforge.net/p/bitchx/git/ci/a9267d071695f7baebc7ac0ede15806400314320/ |title=SourceForge.net Repository - [bitchx&#93; Revision 5 |publisher=sourceforge.net |access-date=2018-01-24}}</ref><ref>{{cite web|url=https://sourceforge.net/p/bitchx/git/ci/9beb1dcd55e9d4272622dd75bb8b7a4e0a147f8c |title=SourceForge.net Repository - [bitchx&#93; Revisions 6, 7 |publisher=sourceforge.net |access-date=2018-01-24}}</ref><ref>{{cite web|url=https://sourceforge.net/p/bitchx/git/ci/ee2fe058c20493749c99f641940ae5d3cbcdd8be |title=SourceForge.net Repository - [bitchx&#93; Revisions 11, 12, 13 |publisher=sourceforge.net |access-date=2018-01-24}}</ref>