CVE-2000-0787

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

IRC Xchat client versions 1.4.2 and earlier allows remote attackers to execute arbitrary commands by encoding shell metacharacters into a URL which XChat uses to launch a web browser.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://archives.neohapsis.com/archives/bugtraq/2000-08/0215.htmlVendor Advisory
http://archives.neohapsis.com/archives/bugtraq/2000-08/0301.htmlVendor Advisory
http://archives.neohapsis.com/archives/bugtraq/2000-08/0305.htmlVendor Advisory
http://www.redhat.com/support/errata/RHSA-2000-055.html
http://www.securityfocus.com/bid/1601Vendor Advisory
http://archives.neohapsis.com/archives/bugtraq/2000-08/0215.htmlVendor Advisory
http://archives.neohapsis.com/archives/bugtraq/2000-08/0301.htmlVendor Advisory
http://archives.neohapsis.com/archives/bugtraq/2000-08/0305.htmlVendor Advisory
http://www.redhat.com/support/errata/RHSA-2000-055.html
http://www.securityfocus.com/bid/1601Vendor Advisory

Timeline

Published: Oct 20, 2000
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2000

CVE-2000-078810.0The Mail Merge tool in Microsoft Word does not prompt the user before executing Visual Basic (VBA) scripts in an Access database, which coul CVE-2000-07894.6WinU 5.x and earlier uses weak encryption to store its configuration password, which allows local users to decrypt the password and gain pri CVE-2000-07904.6The web-based folder display capability in Microsoft Internet Explorer 5.5 on Windows 98 allows local users to insert Trojan horse programs CVE-2000-07914.6Trustix installs the httpsd program for Apache-SSL with world-writeable permissions, which allows local users to replace it with a Trojan ho CVE-2000-07927.5Gnome Lokkit firewall package before 0.41 does not properly restrict access to some ports, even if a user does not make any services availab CVE-2000-079310.0Norton AntiVirus 5.00.01C with the Novell Netware client does not properly restart the auto-protection service after the first user has logg CVE-2000-07947.2Buffer overflow in IRIX libgl.so library allows local users to gain root privileges via a long HOME variable to programs such as (1) gmemusa CVE-2000-07957.2Buffer overflow in lpstat in IRIX 6.2 and 6.3 allows local users to gain root privileges via a long -n option.CVE-2000-07967.2Buffer overflow in dmplay in IRIX 6.2 and 6.3 allows local users to gain root privileges via a long command line option.CVE-2000-07977.2Buffer overflow in gr_osview in IRIX 6.2 and 6.3 allows local users to gain privileges via a long -D option.CVE-2000-079810.0The truncate function in IRIX 6.x does not properly check for privileges when the file is in the xfs file system, which allows local users t CVE-2000-07993.7inpview in InPerson in SGI IRIX 5.3 through IRIX 6.5.10 allows local users to gain privileges via a symlink attack on the .ilmpAAA temporary