CVE

Id
4400  
CVE No.
CVE-2002-0006  
Status
Entry  
Description
XChat 1.8.7 and earlier, including default configurations of 1.4.2 and 1.4.3, allows remote attackers to execute arbitrary IRC commands as other clients via encoded characters in a PRIVMSG command that calls CTCP PING, which expands the characters in the client response when the percascii variable is set.  
Phase
 
Votes
 
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
21068 4400 CVE-2002-0006 BUGTRAQ:20020109 xchat IRC session hijacking vulnerability (versions 1.4.1, 1.4.2)  View
21069 4400 CVE-2002-0006 URL:http://marc.info/?l=bugtraq&m=101060676210255&w=2  View
21070 4400 CVE-2002-0006 DEBIAN:DSA-099  View
21071 4400 CVE-2002-0006 URL:http://www.debian.org/security/2002/dsa-099  View
21072 4400 CVE-2002-0006 REDHAT:RHSA-2002:005  View
21073 4400 CVE-2002-0006 URL:http://rhn.redhat.com/errata/RHSA-2002-005.html  View
21074 4400 CVE-2002-0006 HP:HPSBTL0201-016  View
21075 4400 CVE-2002-0006 URL:http://online.securityfocus.com/advisories/3806  View
21076 4400 CVE-2002-0006 CONECTIVA:CLA-2002:453  View
21077 4400 CVE-2002-0006 URL:http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000453  View
21078 4400 CVE-2002-0006 XF:xchat-ctcp-ping-command(7856)  View
21079 4400 CVE-2002-0006 URL:http://xforce.iss.net/static/7856.php  View
21080 4400 CVE-2002-0006 BID:3830  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
63678 JVNDB-2002-000005 Red Hat Linux の xchat における任意の IRC コマンドを実行される脆弱性 Red Hat Linux の xchat において、 CTCP PING 操作コードの実装に不備があり、他のユーザへの成りすまし等が可能な脆弱性が存在します。 CVE-2002-0006 4400 7.5 http://jvndb.jvn.jp/ja/contents/2002/JVNDB-2002-000005.html  View