aru Posted April 21, 2004 Share Posted April 21, 2004 MandrakeSoft Security Advisory MDKSA-2004:036 : xchat April 21st, 2004 Updated xchat packages fix remote vulnerability A remotely exploitable vulnerability was discovered in the Socks-5 proxy code in XChat. By default, socks5 traversal is disabled, and one would also need to connect to an attacker's own custom proxy server in order for this to be exploited. Successful exploitation could lead to arbitrary code execution as the user running XChat. The provided packages are patched to prevent this problem. The released versions of Mandrake GNU/Linux affected are: 9.2 9.2/AMD64 10.0 Full information about this advisory, including the updated packages, is available at: www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:036 Other references: http://cve.mitre.org/cgi-bin/cvename.cgi?n...e=CAN-2004-0409 http://mail.nl.linux.org/xchat-announce/20...4/msg00000.html Posted automatically by aru (mdksec2mub v0.0.8) Link to comment Share on other sites More sharing options...
Recommended Posts