{"id":"USN-2945-1","aliases":[],"status":"published","title":"xchat-gnome vulnerability","description":"It was discovered that XChat-GNOME incorrectly verified the hostname in an\nSSL certificate. An attacker could trick XChat-GNOME into trusting a rogue\nserver's certificate, which was signed by a trusted certificate authority,\nto perform a machine-in-the-middle attack.","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2016-04-04T18:12:11Z","modified":"2026-02-10T04:40:58Z","fixes":[{"ecosystem":"Ubuntu:14.04:LTS","package":"xchat-gnome","fixed_in":["1:0.30.0~git20131003.d20b8d+really20110821-0.2ubuntu12.2"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"xchat-gnome","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.30.0~git20131003.d20b8d+really20110821-0.2ubuntu12.2"}]}],"versions":["1:0.30.0~git20110821.e2a400-0.2ubuntu9","1:0.30.0~git20110821.e2a400-0.2ubuntu10","1:0.30.0~git20110821.e2a400-0.2ubuntu11","1:0.30.0~git20110821.e2a400-0.2ubuntu12","1:0.30.0~git20131003.d20b8d-2ubuntu1","1:0.30.0~git20131003.d20b8d+really20110821-0.2ubuntu12","1:0.30.0~git20131003.d20b8d+really20110821-0.2ubuntu12.1"]}],"references":[{"url":"https://ubuntu.com/security/notices/USN-2945-1","tags":["advisory"]},{"url":"https://launchpad.net/bugs/1565000","tags":["report"]}],"sources":{"osv":[{"id":"USN-2945-1","title":"xchat-gnome vulnerability","description":"It was discovered that XChat-GNOME incorrectly verified the hostname in an\nSSL certificate. An attacker could trick XChat-GNOME into trusting a rogue\nserver's certificate, which was signed by a trusted certificate authority,\nto perform a machine-in-the-middle attack.\n","status":"published","published":"2016-04-04T18:12:11Z","modified":"2026-02-10T04:40:58Z","updated_at":"2026-11-02T16:58:10.303275Z"}]}}