high7.4Public exploit code
CVE-2016-2087
Directory traversal vulnerability in the client in HexChat 2.11.0 allows remote IRC servers to read or modify arbitrary files via a ..
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Hexchat IRC Client 2.11.0 - Directory Traversal2016-04-04 · local · multiple
Impact
Directory traversal vulnerability in the client in HexChat 2.11.0 allows remote IRC servers to read or modify arbitrary files via a .. (dot dot) in the server name.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Hexchat Project | Hexchat | Version 2.11.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/136564/Hexchat-IRC-Client-2.11.0-Directory-Traversal.html
- http://www.securityfocus.com/bid/95881
- https://www.exploit-db.com/exploits/39656/
- http://packetstormsecurity.com/files/136564/Hexchat-IRC-Client-2.11.0-Directory-Traversal.html
- http://www.securityfocus.com/bid/95881
- https://www.exploit-db.com/exploits/39656/