Directory traversal vulnerability in the client in HexChat 2.11.0 allows remote IRC servers to read or modify arbitrary files via a .. (dot dot) in the server name.
{ "binaries": [ { "binary_version": "2.10.2-1ubuntu3", "binary_name": "hexchat" }, { "binary_version": "2.10.2-1ubuntu3", "binary_name": "hexchat-common" }, { "binary_version": "2.10.2-1ubuntu3", "binary_name": "hexchat-perl" }, { "binary_version": "2.10.2-1ubuntu3", "binary_name": "hexchat-plugins" }, { "binary_version": "2.10.2-1ubuntu3", "binary_name": "hexchat-python" } ] }