CVE-2016-2087

Опубликовано: 18 янв. 2017

Источник: nvd

CVSS3: 7.4

CVSS2: 6.8

EPSS Низкий

Описание

Directory traversal vulnerability in the client in HexChat 2.11.0 allows remote IRC servers to read or modify arbitrary files via a .. (dot dot) in the server name.

Ссылки

http://packetstormsecurity.com/files/136564/Hexchat-IRC-Client-2.11.0-Directory-Traversal.html
Exploit
Third Party Advisory
VDB Entry
http://www.securityfocus.com/bid/95881
https://www.exploit-db.com/exploits/39656/
Exploit
Third Party Advisory
VDB Entry
http://packetstormsecurity.com/files/136564/Hexchat-IRC-Client-2.11.0-Directory-Traversal.html
Exploit
Third Party Advisory
VDB Entry
http://www.securityfocus.com/bid/95881
https://www.exploit-db.com/exploits/39656/
Exploit
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:hexchat_project:hexchat:2.11.0:*:*:*:*:*:*:*

EPSS

Процентиль: 95%

0.09524

Низкий

7.4 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-22

Связанные уязвимости

CVE-2016-2087

CVSS3: 7.4

ubuntu

больше 9 лет назад

Directory traversal vulnerability in the client in HexChat 2.11.0 allows remote IRC servers to read or modify arbitrary files via a .. (dot dot) in the server name.

CVE-2016-2087

CVSS3: 7.4

debian

больше 9 лет назад

Directory traversal vulnerability in the client in HexChat 2.11.0 allo ...

SUSE-SU-2020:2872-1

suse-cvrf

почти 6 лет назад

Security update for hexchat

GHSA-r36g-f4rx-gr5p

CVSS3: 7.4

github

больше 4 лет назад

Directory traversal vulnerability in the client in HexChat 2.11.0 allows remote IRC servers to read or modify arbitrary files via a .. (dot dot) in the server name.

EPSS

Процентиль: 95%

0.09524

Низкий

7.4 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-22