Description
XChat IRC client allows remote attackers to execute arbitrary commands via a /dns command on a host whose DNS reverse lookup contains shell metacharacters.
References
- RHSA-2002:097 vendor-advisory
- xchat-dns-execute-commands(8704) vdb-entry
- RHSA-2002:124 vendor-advisory
- CLA-2002:526 vendor-advisory
- MDKSA-2002:051 vendor-advisory
- 4376 vdb-entry
- 20020327 Xchat /dns command execution vulnerability mailing-list