CVE-2000-0787

HIGH 7.5CVE-2000-0787 · Published 20/10/2000 · updated 16/06/2026

In short

CVE-2000-0787 is a HIGH (CVSS 7.5) vulnerability affecting xchat (xchat).
Chance of exploitation in the next 30 days (EPSS): 9.2%, higher than 95.3% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
xchat xchat	`= 1.2.1= 1.3.10= 1.3.11= 1.3.12= 1.3.13= 1.3.9= 1.4= 1.4.1= 1.4.2= 1.5.6= 1.5.xdev`	No fix yet

Description

IRC Xchat client versions 1.4.2 and earlier allows remote attackers to execute arbitrary commands by encoding shell metacharacters into a URL which XChat uses to launch a web browser.

References

archives.neohapsis.com/archives/bugtraq/2000-08/0215.html · Vendor Advisory
archives.neohapsis.com/archives/bugtraq/2000-08/0301.html · Vendor Advisory
archives.neohapsis.com/archives/bugtraq/2000-08/0305.html · Vendor Advisory
redhat.com/support/errata/RHSA-2000-055.html
securityfocus.com/bid/1601 · Vendor Advisory

More vulnerabilities in xchat

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

xchat

= 1.2.1= 1.3.10= 1.3.11= 1.3.12= 1.3.13= 1.3.9= 1.4= 1.4.1= 1.4.2= 1.5.6= 1.5.xdev

No fix yet

More vulnerabilities in xchat

See all →