Lucene search

K
cve[email protected]CVE-2004-0409
HistoryJun 01, 2004 - 4:00 a.m.

CVE-2004-0409

2004-06-0104:00:00
web.nvd.nist.gov
27
cve-2004-0409
vulnerability
buffer overflow
xchat
socks-5
proxy
remote code execution

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.7 High

AI Score

Confidence

Low

0.231 Low

EPSS

Percentile

96.6%

Stack-based buffer overflow in the Socks-5 proxy code for XChat 1.8.0 to 2.0.8, with socks5 traversal enabled, allows remote attackers to execute arbitrary code.

Affected configurations

NVD
Node
xchatxchatMatch1.8.0
OR
xchatxchatMatch1.8.1
OR
xchatxchatMatch1.8.2
OR
xchatxchatMatch1.8.3
OR
xchatxchatMatch1.8.4
OR
xchatxchatMatch1.8.5
OR
xchatxchatMatch1.8.6
OR
xchatxchatMatch1.8.7
OR
xchatxchatMatch1.8.8
OR
xchatxchatMatch1.8.9
OR
xchatxchatMatch1.9.0
OR
xchatxchatMatch1.9.1
OR
xchatxchatMatch1.9.2
OR
xchatxchatMatch1.9.3
OR
xchatxchatMatch1.9.4
OR
xchatxchatMatch1.9.5
OR
xchatxchatMatch1.9.6
OR
xchatxchatMatch1.9.7
OR
xchatxchatMatch1.9.8
OR
xchatxchatMatch1.9.9
OR
xchatxchatMatch2.0.0
OR
xchatxchatMatch2.0.1
OR
xchatxchatMatch2.0.2
OR
xchatxchatMatch2.0.3
OR
xchatxchatMatch2.0.4
OR
xchatxchatMatch2.0.5
OR
xchatxchatMatch2.0.6
OR
xchatxchatMatch2.0.7
OR
xchatxchatMatch2.0.8

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.7 High

AI Score

Confidence

Low

0.231 Low

EPSS

Percentile

96.6%