Vulnerabilities > CVE-2002-0006 - Remote IRC Command Execution vulnerability in X-Chat CTCP Ping Arbitrary

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
PARTIAL
network
low complexity
xchat
nessus
exploit available
NVD
Published: 2002-06-25
Updated: 2017-10-10

Summary

XChat 1.8.7 and earlier, including default configurations of 1.4.2 and 1.4.3, allows remote attackers to execute arbitrary IRC commands as other clients via encoded characters in a PRIVMSG command that calls CTCP PING, which expands the characters in the client response when the percascii variable is set.

Vulnerable Configurations

Part Description Count
Application
Xchat
2

Exploit-Db

descriptionX-Chat 1.x CTCP Ping Arbitrary Remote IRC Command Execution Vulnerability. CVE-2002-0006. Remote exploit for linux platform
idEDB-ID:21210
last seen2016-02-02
modified2002-01-09
published2002-01-09
reporterMarcus Meissner
sourcehttps://www.exploit-db.com/download/21210/
titleX-Chat 1.x CTCP Ping Arbitrary Remote IRC Command Execution Vulnerability

Nessus

NASL familyDebian Local Security Checks
NASL idDEBIAN_DSA-099.NASL
descriptionzen-parse found a vulnerability in the XChat IRC client that allows an attacker to take over the users IRC session. It is possible to trick XChat IRC clients into sending arbitrary commands to the IRC server they are on, potentially allowing social engineering attacks, channel takeovers, and denial of service. This problem exists in versions 1.4.2 and 1.4.3. Later versions of XChat are vulnerable as well, but this behaviour is controlled by the configuration variable >>percascii<<, which defaults to 0. If it is set to 1 then the problem becomes apparent in 1.6/1.8 as well.
last seen2020-06-01
modified2020-06-02
plugin id14936
published2004-09-29
reporterThis script is Copyright (C) 2004-2019 Tenable Network Security, Inc.
sourcehttps://www.tenable.com/plugins/nessus/14936
titleDebian DSA-099-1 : xchat - IRC session hijacking

Redhat

advisories
rhsa
idRHSA-2002:005

References