193 matches found
CVE-2003-1000
Removed by vendor...
CVE-2003-1000
xchat 2.0.6 allows remote attackers to cause a denial of service crash via a passive DCC request with an invalid ID number, which causes a null dereference...
CVE-2003-1000
The CVE-2003-1000 vulnerability concerns xchat 2.0.6. It allows remote attackers to crash the client by sending a passive DCC request with an invalid ID, triggering a null dereference. Connected sources confirm the affected software/version and the underlying cause. Mitigation details are limited...
CVE-2003-1000: NULL Pointer Dereference
xchat 2.0.6 allows remote attackers to cause a denial of service crash via a passive DCC request with an invalid ID number, which causes a null dereference...
PT-2003-2001 · Xchat · Xchat
Name of the Vulnerable Software and Affected Versions: xchat version 2.0.6 Description: The issue allows remote attackers to cause a denial of service, resulting in a crash, via a passive DCC request with an invalid ID number. This action causes a null dereference. Recommendations: For xchat...
[Full-Disclosure] xchat 2.0.6 crashes with mirc 6.0-6.11 DCC exploit
xchat 2.0.6 crashes with mirc 6.0-6.11 DCC exploit the machine on which xchat crashed Linux 2.4.23 xchat 2.0.6 the machine who did the exploit mirc 6.12 Windows XP --- what happend: i starded xchat 2.0.6 on my linux machine and, just for fun, tried to exploit it via mirc. if you are not familiar...
XChat: malformed dcc send request denial of service
Background XChat is a multiplatform IRC client. Description There is a remotely exploitable bug in XChat 2.0.6 that could lead to a denial of service attack. Gentoo wishes to thank lloydbates for discovering this bug, as well as jcdutton and rac for submitting patches to fix the bug. Impact A...
CVE-2002-0382
Summary: CVE-2002-0382 affects the XChat IRC client. The issue arises when handling a /dns query, where the DNS reverse lookup can contain shell metacharacters, allowing arbitrary commands to be executed with the user’s privileges. This is caused by XChat passing the resolver/hostname to a shell ...
CVE-2002-0006
Vulnerability summary (CVE-2002-0006) : XChat versions 1.8.7 and earlier (including default configurations of 1.4.2 and 1.4.3) are vulnerable. A remote attacker can execute arbitrary IRC commands as another client by sending specially encoded characters in a PRIVMSG that calls CTCP PING, which ca...
CVE-2002-0382
XChat IRC client allows remote attackers to execute arbitrary commands via a /dns command on a host whose DNS reverse lookup contains shell metacharacters...
CVE-2002-0006
XChat 1.8.7 and earlier, including default configurations of 1.4.2 and 1.4.3, allows remote attackers to execute arbitrary IRC commands as other clients via encoded characters in a PRIVMSG command that calls CTCP PING, which expands the characters in the client response when the percascii variabl...
CVE-2002-0382: Undefined Security Weakness
XChat IRC client allows remote attackers to execute arbitrary commands via a /dns command on a host whose DNS reverse lookup contains shell metacharacters...
CVE-2002-0006: Undefined Security Weakness
XChat 1.8.7 and earlier, including default configurations of 1.4.2 and 1.4.3, allows remote attackers to execute arbitrary IRC commands as other clients via encoded characters in a PRIVMSG command that calls CTCP PING, which expands the characters in the client response when the percascii variabl...
Important: Red Hat Security Advisory: xchat security update
A security issue in XChat allows a malicious server to execute arbitrary commands. XChat is a popular cross-platform IRC client. Versions of XChat prior to 1.8.9 do not filter the response from an IRC server when a /dns query is executed. Because XChat resolves hostnames by passing the configured...
CVE-2002-0382
XChat IRC client allows remote attackers to execute arbitrary commands via a /dns command on a host whose DNS reverse lookup contains shell metacharacters...
CVE-2002-0006
XChat 1.8.7 and earlier, including default configurations of 1.4.2 and 1.4.3, allows remote attackers to execute arbitrary IRC commands as other clients via encoded characters in a PRIVMSG command that calls CTCP PING, which expands the characters in the client response when the percascii variabl...
Important: Red Hat Security Advisory: : : : Updated xchat packages fix "/dns" vulnerability
A security vulnerability in XChat allows a malicious server to execute arbitrary commands. Updated 11 July 2003 Added packages for Red Hat Linux on IBM iSeries and pSeries systems. XChat is a popular cross-platform IRC client. Versions of XChat prior to 1.8.9 do not filter the response from an IR...
Command execution in XChat
During call to external program DNS name of remote host is used withot stripping of shell characters...
Xchat /dns command execution vulnerability
Xchat - Remote command execution name : Xchat date : 27/3/2002 description : Xchat is a graphical IRC client widely used in the linux and bsd community severity : Low risk homepage : www.xchat.org versions : probably all Bug description : There is an issue by the way xchat handle the /exec comman...
