First published: Wed Jan 18 2017(Updated: )
Directory traversal vulnerability in the client in HexChat 2.11.0 allows remote IRC servers to read or modify arbitrary files via a .. (dot dot) in the server name.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
HexChat | =2.11.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2016-2087 is classified as a high severity vulnerability.
To fix CVE-2016-2087, upgrade your HexChat client to a version later than 2.11.0.
CVE-2016-2087 is a directory traversal vulnerability affecting HexChat 2.11.0.
Attackers can read or modify arbitrary files on the client system through the vulnerability in CVE-2016-2087.
CVE-2016-2087 specifically affects HexChat version 2.11.0.