Facebook Google Plus Twitter LinkedIn YouTube RSS Menu Search Resource - BlogResource - WebinarResource - ReportResource - Eventicons_066 icons_067icons_068icons_069icons_070

XChat Client URL Metacharacter Command Execution



The remote host is vulnerable to an flaw which allows attackers to execute arbitrary commands.


The remote host is running the XChat IRC client. XChat IRC client versions 1.3.9 and later could allow an attacker to execute arbitrary shell commands. By embedding commands enclosed in backticks in URLs sent to XChat, a remote attacker can execute commands as the user.


Upgrade or patch according to vendor recommendations.