CVE-2004-0409

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 9.0% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2004-06-01 · updated 2026-06-16

Description

Stack-based buffer overflow in the Socks-5 proxy code for XChat 1.8.0 to 2.0.8, with socks5 traversal enabled, allows remote attackers to execute arbitrary code.

Affected products

xchat: 1.8.0, 1.8.1, 1.8.2, 1.8.3, 1.8.4, 1.8.5 (+23)

References

http://mail.nl.linux.org/xchat-announce/2004-04/msg00000.html
http://security.gentoo.org/glsa/glsa-200404-15.xml
http://www.fedoralegacy.org/updates/FC2/2005-11-14-FLSA_2005_123013
http://www.redhat.com/support/errata/RHSA-2004-177.html
http://www.redhat.com/support/errata/RHSA-2004-585.html
http://www.xchat.org/
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11312
https://www.debian.org/security/2004/dsa-493
http://mail.nl.linux.org/xchat-announce/2004-04/msg00000.html
http://security.gentoo.org/glsa/glsa-200404-15.xml
http://www.fedoralegacy.org/updates/FC2/2005-11-14-FLSA_2005_123013
http://www.redhat.com/support/errata/RHSA-2004-177.html

Get alerted when CVE-2004-0409 or the next vulnerability affects your stack