Vulnerability Report

CVE-2004-0409

Title: XChat Socks-5 proxy buffer overflow RCE

Memory Corruption

Proof Of Concept

PoC Available for CVE-2004-0409

CWE Category NVD-CWE-noinfo

Published Date Jun 01, 2004

Modified Date Jun 16, 2026

Exploit Status Available

Score 7.5 CVSS v2.0

Exploit Probability (EPSS)

8.96%

Vulnerability Summary

CVE-2004-0409: Stack-based buffer overflow in the Socks-5 proxy code for XChat 1.8.0 to 2.0.8, with socks5 traversal enabled, allows remote attackers to execute arbitrary code.

Impacted Vendors

xchat 1

Reference Links

http://mail.nl.linux.org/xchat-announce/2004-04/msg00000.html http://security.gentoo.org/glsa/glsa-200404-15.xml http://www.fedoralegacy.org/updates/FC2/2005-11-14-FLSA_2005_123013 http://www.redhat.com/support/errata/RHSA-2004-177.html http://www.redhat.com/support/errata/RHSA-2004-585.html http://www.xchat.org/ https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11312 https://www.debian.org/security/2004/dsa-493 http://mail.nl.linux.org/xchat-announce/2004-04/msg00000.html http://security.gentoo.org/glsa/glsa-200404-15.xml http://www.fedoralegacy.org/updates/FC2/2005-11-14-FLSA_2005_123013 http://www.redhat.com/support/errata/RHSA-2004-177.html http://www.redhat.com/support/errata/RHSA-2004-585.html http://www.xchat.org/ https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11312 https://www.debian.org/security/2004/dsa-493

CVSS v2.0

Source Entity [email protected]

Severity HIGH

7.5

Access Vector

N/A

Authentication

N/A

RAW VECTOR AV:N/AC:L/Au:N/C:P/I:P/A:P

Associated Attack Patterns (CAPEC)

Total: Patterns

CVE-2004-0409 Exploits & PoCs (Proof Of Concept)

Exploit-DB https://www.exploit-db.com/exploits/296

View Code

June 16, 2026 MODIFIED

Vulnerability data updated via NVD.

April 03, 2025 MODIFIED

Vulnerability data or affected products updated.

June 01, 2004 PUBLISHED

Vulnerability first announced in NVD.

Attack Vector Matrix

Access Vector N/A

Complexity N/A

Privileges N/A

Interaction NONE

CVSS Vector String


                                    AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected Stack

No specific products linked.