CVE-2004-0409

Stack-based buffer overflow in the Socks-5 proxy code for XChat 1.8.0 to 2.0.8, with socks5...

7.5 HighPublic exploitFix available

Stack-based buffer overflow in the Socks-5 proxy code for XChat 1.8.0 to 2.0.8, with socks5 traversal enabled, allows remote attackers to execute arbitrary code.

Exploit likelihood

8.96%Down 11.1 points since Feb 4, 2022

What each source reports

NVD Score used 7.5

Stack-based buffer overflow in the Socks-5 proxy code for XChat 1.8.0 to 2.0.8, with socks5 traversal enabled, allows remote attackers to execute arbitrary code.

Record: CVE-2004-0409
CVSS 2.0: 7.5 HighAV:N/AC:L/Au:N/C:P/I:P/A:P
Updated: 2026-11-02

CVE List No score

Stack-based buffer overflow in the Socks-5 proxy code for XChat 1.8.0 to 2.0.8, with socks5 traversal enabled, allows remote attackers to execute arbitrary code.

Record: CVE-2004-0409
Updated: 2026-11-02

EUVDEUVD-2004-0409 No score

Stack-based buffer overflow in the Socks-5 proxy code for XChat 1.8.0 to 2.0.8, with socks5 traversal enabled, allows remote attackers to execute arbitrary code.

Record: EUVD-2004-0409
Updated: 2026-11-03

GitHub AdvisoriesGHSA-jx75-hx64-35mh No score

Stack-based buffer overflow in the Socks-5 proxy code for XChat 1.8.0 to 2.0.8, with socks5...

Stack-based buffer overflow in the Socks-5 proxy code for XChat 1.8.0 to 2.0.8, with socks5 traversal enabled, allows remote attackers to execute arbitrary code.

Record: GHSA-jx75-hx64-35mh
Updated: 2026-11-02

Affected products

xchat

Affected packages

Affected packages
Package	Affected	Fixed
`xchat` Debian:3.0	before 1.8.9-0woody3	1.8.9-0woody3
`xchat` Red Hat:enterprise_linux:3::as	before 1:2.0.4-4.EL	1:2.0.4-4.EL
`xchat-debuginfo` Red Hat:enterprise_linux:3::as	before 1:2.0.4-4.EL	1:2.0.4-4.EL
`xchat` Red Hat:enterprise_linux:3::desktop	before 1:2.0.4-4.EL	1:2.0.4-4.EL
`xchat-debuginfo` Red Hat:enterprise_linux:3::desktop	before 1:2.0.4-4.EL	1:2.0.4-4.EL
`xchat` Red Hat:enterprise_linux:3::es	before 1:2.0.4-4.EL	1:2.0.4-4.EL
`xchat-debuginfo` Red Hat:enterprise_linux:3::es	before 1:2.0.4-4.EL	1:2.0.4-4.EL
`xchat` Red Hat:enterprise_linux:3::ws	before 1:2.0.4-4.EL	1:2.0.4-4.EL
`xchat-debuginfo` Red Hat:enterprise_linux:3::ws	before 1:2.0.4-4.EL	1:2.0.4-4.EL

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
Exploit-DB	XChat 1.8.0/2.0.8 socks5 - Remote Buffer Overflow	2004-05-05

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, Exploit-DB, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2004-0409 is a high vulnerability (CVSS 7.5) in Xchat, published April 17, 2004. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 8.96%, the 95th percentile. Fixed in xchat 1.8.9-0woody3.

References

Show 12 moreShow less