CVE-2002-0006

CVE-2002-0006 describes a remote IRC command execution vulnerability affecting XChat versions 1.8.7 and earlier, including default configurations of 1.4.2 and 1.4.3. Attackers can exploit this by sending specially crafted PRIVMSG commands containing encoded characters that trigger a CTCP PING, leading to the expansion and execution of arbitrary IRC commands on the victim's client when the 'percascii' variable is set. The vulnerability carries a CVSS score of 7.5, indicating high severity with a network-based attack vector, low attack complexity, and potential for partial compromise of confidentiality, integrity, and availability. While there is no evidence of active exploitation or Metasploit/Nuclei modules, an exploit (EDB-21210) is available on ExploitDB. Community discussion and media coverage for this CVE are minimal.