CVE-2016-2087

High

Published: 18/01/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

Directory traversal vulnerability in the client in HexChat 2.11.0 allows remote IRC servers to read or modify arbitrary files via a .. (dot dot) in the server name.

Risk Assessment

An attacker could gain access to sensitive data or modify system files, potentially leading to serious security breaches.

Recommendation

It is recommended to update HexChat to the latest version to mitigate this vulnerability and to monitor server logs for potential attack attempts.

Other vulnerabilities in HexChat 2.11.0

CVE-2016-2233High
A stack-based buffer overflow in the inbound_cap_ls function in common/inbound.c in HexChat 2.10.2 allows remote IRC servers to cause a denial of service (crash) by sending a large number of options in a CAP LS message.

Original NVD description (English source)

Directory traversal vulnerability in the client in HexChat 2.11.0 allows remote IRC servers to read or modify arbitrary files via a .. (dot dot) in the server name.