VDB
CVE-2002-0382
CVE-2002-0382
PUBLISHED
CVSS 7.5 HIGH
XChat IRC client allows remote attackers to execute arbitrary commands via a /dns command on a host whose DNS reverse lookup contains shell metacharacters.
EPSS 2.39% · 83.9th percentile
Risk Scores
CVSS 2.0
7.5
EPSS Score
2.39%
83.9th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| xchat | xchat | 0 |
| n/a | n/a | n/a |
Timeline
- Jun 25, 2002 CVE Published
- Feb 4, 2022 EPSS Score
- Mar 29, 2022 EPSS Score
- May 21, 2022 EPSS Score
- Jul 13, 2022 EPSS Score
- Sep 5, 2022 EPSS Score
- Oct 29, 2022 EPSS Score
- Dec 21, 2022 EPSS Score
- Feb 12, 2023 EPSS Score
- Apr 6, 2023 EPSS Score
- May 29, 2023 EPSS Score
- Jul 21, 2023 EPSS Score
References
- RHSA-2002:124 vendor-advisory
- MDKSA-2002:051 vendor-advisory
- 4376 vdb
- 20020327 Xchat /dns command execution vulnerability mailing-list
- http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000526 technical
- http://www.iss.net/security_center/static/8704.php technical
- http://www.redhat.com/support/errata/RHSA-2002-097.html technical
- https://nvd.nist.gov/vuln/detail/CVE-2002-0382 advisory