CVE-2004-0409: Xchat

High severity, CVSS 7.5. EPSS: 9% chance of exploitation in the next 30 days.

Stack-based buffer overflow in the Socks-5 proxy code for XChat 1.8.0 to 2.0.8, with socks5 traversal enabled, allows remote attackers to execute arbitrary code.

Affected products

• Xchat Xchat: version 1.8.0 only; version 1.8.1 only; version 1.8.2 only; version 1.8.3 only; version 1.8.4 only; version 1.8.5 only; …

Published 2004-06-01. Last modified 2026-06-16.