CVE-2004-0409 EXPLOIT
7.5
HIGH · CVSS 2.0 · EPSS 9% (pctl 95)
Patch early
A public exploit exists.
Description
Stack-based buffer overflow in the Socks-5 proxy code for XChat 1.8.0 to 2.0.8, with socks5 traversal enabled, allows remote attackers to execute arbitrary code.
Scoring
| CVSS | 7.5 (HIGH, v2.0) |
|---|---|
| Vector | AV:N/AC:L/Au:N/C:P/I:P/A:P |
| EPSS | 8.96% — more likely to be exploited than 95% of all CVEs |
| On CISA KEV | no |
| Public exploit | yes |
| Published | 2004-06-01 |
| Last modified | 2026-06-16 |
Affected (1)
| Vendor | Product |
|---|---|
| xchat | xchat |
Public exploits
| Source | Title | Date |
|---|---|---|
| exploit-db | XChat 1.8.0/2.0.8 socks5 - Remote Buffer Overflow | 2004-05-05 |
References
- http://mail.nl.linux.org/xchat-announce/2004-04/msg00000.html
- http://security.gentoo.org/glsa/glsa-200404-15.xml
- http://www.fedoralegacy.org/updates/FC2/2005-11-14-FLSA_2005_123013
- http://www.redhat.com/support/errata/RHSA-2004-177.html
- http://www.redhat.com/support/errata/RHSA-2004-585.html
- http://www.xchat.org/
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11312
- https://www.debian.org/security/2004/dsa-493
- http://mail.nl.linux.org/xchat-announce/2004-04/msg00000.html
- http://security.gentoo.org/glsa/glsa-200404-15.xml
- http://www.fedoralegacy.org/updates/FC2/2005-11-14-FLSA_2005_123013
- http://www.redhat.com/support/errata/RHSA-2004-177.html
- http://www.redhat.com/support/errata/RHSA-2004-585.html
- http://www.xchat.org/
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11312
- https://www.debian.org/security/2004/dsa-493
→ the Explorer · watch your stack · NVD