high7.5Public exploit code
CVE-2000-0787
IRC Xchat client versions 1.4.2 and earlier allows remote attackers to execute arbitrary commands by encoding shell metacharacters into a URL which XChat uses …
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- X-Chat 1.2/1.3/1.4/1.5 - Command Execution via URLs2000-08-17 · remote · linux · Verified
Impact
IRC Xchat client versions 1.4.2 and earlier allows remote attackers to execute arbitrary commands by encoding shell metacharacters into a URL which XChat uses to launch a web browser.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Xchat | Xchat | Versions 1.2.1, 1.3.9, 1.3.10, 1.3.11, 1.3.12, 1.3.13 |
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/bugtraq/2000-08/0215.html
- http://archives.neohapsis.com/archives/bugtraq/2000-08/0301.html
- http://archives.neohapsis.com/archives/bugtraq/2000-08/0305.html
- http://www.redhat.com/support/errata/RHSA-2000-055.html
- http://www.securityfocus.com/bid/1601
- http://archives.neohapsis.com/archives/bugtraq/2000-08/0215.html
- http://archives.neohapsis.com/archives/bugtraq/2000-08/0301.html
- http://archives.neohapsis.com/archives/bugtraq/2000-08/0305.html
- http://www.redhat.com/support/errata/RHSA-2000-055.html
- http://www.securityfocus.com/bid/1601