8 matches found
Gentoo Security Advisory GLSA 200404-15 (xchat)
The remote host is missing updates announced in advisory GLSA 200404-15. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...
RHEL 2.1 / 3 : xchat (RHSA-2004:585)
An updated xchat package that fixes a stack-based buffer overflow in the SOCKSv5 proxy code. X-Chat is a graphical IRC chat client for the X Window System. A stack-based buffer overflow has been fixed in the SOCKSv5 proxy code. An attacker could create a malicious SOCKSv5 proxy server in such a w...
Mandrake Linux Security Advisory : xchat (MDKSA-2004:036)
A remotely exploitable vulnerability was discovered in the Socks-5 proxy code in XChat. By default, socks5 traversal is disabled, and one would also need to connect to an attacker's own custom proxy server in order for this to be exploited. Successful exploitation could lead to arbitrary code...
CVE-2004-0409
Stack-based buffer overflow in the Socks-5 proxy code for XChat 1.8.0 to 2.0.8, with socks5 traversal enabled, allows remote attackers to execute arbitrary code...
[SECURITY] [DSA 493-1] New xchat packages fix arbitrary code execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 493-1 [email protected] http://www.debian.org/security/ Martin Schulze April 21st, 2004 http://www.debian.org/security/faq -...
CVE-2004-0409
Stack-based buffer overflow in the Socks-5 proxy code for XChat 1.8.0 to 2.0.8, with socks5 traversal enabled, allows remote attackers to execute arbitrary code...
CVE-2004-0409
CVE-2004-0409 is a stack-based overflow in XChat’s Socks5 proxy code affecting versions 1.8.0 through 2.0.8 with Socks5 traversal enabled. The vulnerability allows a remote attacker to execute arbitrary code via a crafted SOCKSv5 proxy, as detailed in vendor advisories (Red Hat RHSA-2004:585, Deb...
CVE-2004-0409
Removed by vendor...