NVD

Id
79026  
Name
CVE-2002-0006  
Description
XChat 1.8.7 and earlier, including default configurations of 1.4.2 and 1.4.3, allows remote attackers to execute arbitrary IRC commands as other clients via encoded characters in a PRIVMSG command that calls CTCP PING, which expands the characters in the client response when the percascii variable is set.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-05  
Published
2002-06-25  
Modified Date
2016-10-17  
Seq
2002-0006  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
394457 79026 CVE-2002-0006 CLA-2002:453  View
394458 79026 CVE-2002-0006 20020109 xchat IRC session hijacking vulnerability (versions 1.4.1, 1.4.2)  View
394459 79026 CVE-2002-0006 HPSBTL0201-016  View
394460 79026 CVE-2002-0006 RHSA-2002:005  View
394461 79026 CVE-2002-0006 DSA-099  View
394462 79026 CVE-2002-0006 3830  View
394463 79026 CVE-2002-0006 xchat-ctcp-ping-command(7856)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
63678 JVNDB-2002-000005 Red Hat Linux の xchat における任意の IRC コマンドを実行される脆弱性 Red Hat Linux の xchat において、 CTCP PING 操作コードの実装に不備があり、他のユーザへの成りすまし等が可能な脆弱性が存在します。 CVE-2002-0006 4400 CVE-2002-0006 79026 7.5 http://jvndb.jvn.jp/ja/contents/2002/JVNDB-2002-000005.html 2002-01-07 2007-04-01 View