• info
• discussion
• exploit
• solution
• references

X-Chat CTCP Ping Arbitrary Remote IRC Command Execution Vulnerability

Solution:
Updated versions of X-Chat are available.


X-Chat X-Chat 1.4

• Red Hat xchat-1.8.7-1.62.0.alpha.rpm
  ftp://updates.redhat.com/6.2/en/os/alpha/xchat-1.8.7-1.62.0.alpha.rpm


• Red Hat xchat-1.8.7-1.62.0.i386.rpm
  ftp://updates.redhat.com/6.2/en/os/i386/xchat-1.8.7-1.62.0.i386.rpm


• Red Hat xchat-1.8.7-1.62.0.sparc.rpm
  ftp://updates.redhat.com/6.2/en/os/sparc/xchat-1.8.7-1.62.0.sparc.rpm


• X-Chat X-Chat 1.8.7
  http://www.xchat.org/download.html

X-Chat X-Chat 1.4.1

• Mandrake xchat-1.8.7-1.2mdk.i586.rpm
  for Mandrake 7.2
  http://www.linux-mandrake.com/en/ftp.php3


• Mandrake xchat-1.8.7-1.3mdk.i586.rpm
  for Mandrake 7.1
  http://www.linux-mandrake.com/en/ftp.php3


• Mandrake xchat-1.8.7-1.3mdk.i586.rpm
  for Mandrake Corporate Server 1.0.1
  http://www.linux-mandrake.com/en/ftp.php3


• X-Chat X-Chat 1.8.7
  http://www.xchat.org/download.html

X-Chat X-Chat 1.4.2

• Conectiva xchat-1.4.2-5U50_1cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/5.0/i386/xchat-1.4.2-5U50_1cl.i386 .rpm


• Conectiva xchat-1.4.2-5U50_1cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/ferramentas/ecommerce/i386/xchat-1 .4.2-5U50_1cl.i386.rpm


• Conectiva xchat-1.4.2-5U50_1cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/ferramentas/graficas/i386/xchat-1. 4.2-5U50_1cl.i386.rpm


• Conectiva xchat-1.4.2-5U51_1cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/5.1/i386/xchat-1.4.2-5U51_1cl.i386 .rpm


• Red Hat xchat-1.8.7-1.70.0.alpha.rpm
  ftp://updates.redhat.com/7.0/en/os/alpha/xchat-1.8.7-1.70.0.alpha.rpm


• Red Hat xchat-1.8.7-1.70.0.i386.rpm
  ftp://updates.redhat.com/7.0/en/os/i386/xchat-1.8.7-1.70.0.i386.rpm


• X-Chat X-Chat 1.8.7
  http://www.xchat.org/download.html

X-Chat X-Chat 1.4.3

• Conectiva xchat-1.4.3-8U60_1cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/6.0/RPMS/xchat-1.4.3-8U60_1cl.i386 .rpm


• X-Chat X-Chat 1.8.7
  http://www.xchat.org/download.html

X-Chat X-Chat 1.6.3

• Red Hat xchat-1.8.7-1.71.0.alpha.rpm
  ftp://updates.redhat.com/7.1/en/os/alpha/xchat-1.8.7-1.71.0.alpha.rpm


• Red Hat xchat-1.8.7-1.71.0.i386.rpm
  ftp://updates.redhat.com/7.1/en/os/i386/xchat-1.8.7-1.71.0.i386.rpm


• Red Hat xchat-1.8.7-1.71.0.ia64.rpm
  ftp://updates.redhat.com/7.1/en/os/ia64/xchat-1.8.7-1.71.0.ia64.rpm


• X-Chat X-Chat 1.8.7
  http://www.xchat.org/download.html

X-Chat X-Chat 1.6.4

• X-Chat X-Chat 1.8.7
  http://www.xchat.org/download.html

X-Chat X-Chat 1.7.7

• Conectiva xchat-1.8.7-1U70_1cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/7.0/RPMS/xchat-1.8.7-1U70_1cl.i386 .rpm


• Conectiva xchat-gtk-1.8.7-1U70_1cl.i386.rpm
  ftp://atualizacoes.conectiva.com.br/7.0/RPMS/xchat-gtk-1.8.7-1U70_1cl. i386.rpm

X-Chat X-Chat 1.8

• Mandrake xchat-1.8.7-1.1mdk.i586.rpm
  for Mandrake 8.0 i586
  http://www.linux-mandrake.com/en/ftp.php3


• Mandrake xchat-1.8.7-1.1mdk.ppc.rpm
  for Mandrake 8.0 ppc
  http://www.linux-mandrake.com/en/ftp.php3

X-Chat X-Chat 1.8.1

• Red Hat xchat-1.8.7-1.72.0.i386.rpm
  ftp://updates.redhat.com/7.2/en/os/i386/xchat-1.8.7-1.72.0.i386.rpm


• Red Hat xchat-1.8.7-1.72.0.ia64.rpm
  ftp://updates.redhat.com/7.2/en/os/ia64/xchat-1.8.7-1.72.0.ia64.rpm


• X-Chat X-Chat 1.8.7
  http://www.xchat.org/download.html

X-Chat X-Chat 1.8.2

• Mandrake xchat-1.8.7-1.1mdk.i586.rpm
  for Mandrake 8.1 i586
  http://www.linux-mandrake.com/en/ftp.php3


• Mandrake xchat-1.8.7-1.1mdk.ia64.rpm
  for Mandrake 8.1 ia64
  http://www.linux-mandrake.com/en/ftp.php3

X-Chat X-Chat 1.8.6

• X-Chat X-Chat 1.8.7
  http://www.xchat.org/download.html