security flaw

Stack-based buffer overflow in the Socks-5 proxy code for XChat 1.8.0 to 2.0.8, with socks5 traversal enabled, allows remote attackers to execute arbitrary code...

Debian DSA-099-1 : xchat - IRC session hijacking

zen-parse found a vulnerability in the XChat IRC client that allows an attacker to take over the users IRC session. It is possible to trick XChat IRC clients into sending arbitrary commands to the IRC server they are on, potentially allowing social engineering attacks, channel takeovers, and deni...

Debian DSA-493-1 : xchat - buffer overflow

A buffer overflow has been discovered in the Socks-5 proxy code of XChat, an IRC client for X similar to AmIRC. This allows an attacker to execute arbitrary code on the users' machine. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

CVE-2001-0792

CVE-2001-0792 describes a format-string vulnerability in XChat 1.2.x that lets remote attackers execute arbitrary code via a malformed nickname. The provided documents identify the affected product as XChat 1.2.x and classify the issue as a remote, unauthenticated vector with potential for arbitr...

CVE-2001-0792

Format string vulnerability in XChat 1.2.x allows remote attackers to execute arbitrary code via a malformed nickname...

GLSA-200404-15 : XChat 2.0.x SOCKS5 Vulnerability

The remote host is affected by the vulnerability described in GLSA-200404-15 XChat 2.0.x SOCKS5 Vulnerability The SOCKS 5 proxy code in XChat is vulnerable to a remote exploit. Users would have to be using XChat through a SOCKS 5 server, enable SOCKS 5 traversal which is disabled by default and...

XChat /dns Reverse Lookup Response Arbitrary Command Execution

Binary data 1874.prm...

XChat Malformed Nickname Remote Format String

Binary data 1873.prm...

XChat Client URL Metacharacter Command Execution

Binary data 1876.prm...

XChat CTCP Ping Arbitrary Remote IRC Command Execution

Binary data 1875.prm...

Mandrake Linux Security Advisory : xchat (MDKSA-2004:036)

A remotely exploitable vulnerability was discovered in the Socks-5 proxy code in XChat. By default, socks5 traversal is disabled, and one would also need to connect to an attacker's own custom proxy server in order for this to be exploited. Successful exploitation could lead to arbitrary code...

Mandrake Linux Security Advisory : xchat (MDKSA-2002:006)

zen-parse discovered a problem in versions 1.4.2 and 1.4.3 of xchat that could allow a malicious user to send commands to the IRC server they are on which would take advantage of the CTCP PING reply handler in xchat. This could be used for denial of service, channel takeovers, and other similar...

Mandrake Linux Security Advisory : xchat (MDKSA-2002:051)

In versions of the xchat IRC client prior to version 1.8.9, xchat does not filter the response from an IRC server when a /dns query is executed. xchat resolves hostnames by passing the configured resolver and hostname to a shell, so an IRC server may return a malicious response formatted so that...

FreeBSD : xchat remotely exploitable buffer overflow (Socks5) (204)

The following package needs to be updated: xchat2 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated by freebsdpkg8338a20f957311d893660020ed76ef5a.nasl. Disabled on 2011/10/02. C Tenable Network Security, Inc. This script contains information extracted from VuXML : Copyright...

RHEL 2.1 : xchat (RHSA-2002:124)

A security issue in XChat allows a malicious server to execute arbitrary commands. XChat is a popular cross-platform IRC client. Versions of XChat prior to 1.8.9 do not filter the response from an IRC server when a /dns query is executed. Because XChat resolves hostnames by passing the configured...

CVE-2004-0409

Stack-based buffer overflow in the Socks-5 proxy code for XChat 1.8.0 to 2.0.8, with socks5 traversal enabled, allows remote attackers to execute arbitrary code...

CVE-2004-0409

Stack-based buffer overflow in the Socks-5 proxy code for XChat 1.8.0 to 2.0.8, with socks5 traversal enabled, allows remote attackers to execute arbitrary code...

XChat 1.8.0/2.0.8 socks5 Remote Buffer overflow Exploit

Exploit for linux platform in category remote exploits ======================================================= XChat 1.8.0/2.0.8 socks5 Remote Buffer overflow Exploit ======================================================= / X-Chatv1.8.0 - v2.0.8: socks-5 remote buffer overflow exploit. by:...

XChat 1.8.02.0.8 socks5 - Remote Buffer Overflow

XChat 1.8.02.0.8 socks5 - Remote Buffer Overflow / X-Chatv1.8.0 - v2.0.8: socks-5 remote buffer overflow exploit. by: vade79/v9 v9 fakehalo deadpig org fakehalo/realhalo X-Chat homepage: http://www.xchat.org compile: cc xxchat-socks5.c -o xxchat-socks5 trigger bug/workingsX-Chat socks-5...

XChat 1.8.0/2.0.8 socks5 - Remote Buffer Overflow

/ X-Chatv1.8.0 - v2.0.8: socks-5 remote buffer overflow exploit. by: vade79/v9 v9 fakehalo deadpig org fakehalo/realhalo X-Chat homepage: http://www.xchat.org compile: cc xxchat-socks5.c -o xxchat-socks5 trigger bug/workingsX-Chat socks-5 comminucation: 0x05,0x00 0x05,0x00,0x00,0x03 0x?? the size...