The ssl_do_connect function in common/server.c in HexChat before 2.10.2, XChat, and XChat-GNOME does not verify that the server hostname matches a domain name in the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Ubuntu_linux | Canonical | 12.04 (including) | 12.04 (including) |
| Ubuntu_linux | Canonical | 14.04 (including) | 14.04 (including) |
| Ubuntu_linux | Canonical | 15.10 (including) | 15.10 (including) |
| Hexchat | Ubuntu | trusty | * |
| Hexchat | Ubuntu | upstream | * |
| Xchat | Ubuntu | precise | * |
| Xchat | Ubuntu | trusty | * |
| Xchat | Ubuntu | wily | * |
| Xchat-gnome | Ubuntu | precise | * |
| Xchat-gnome | Ubuntu | trusty | * |
| Xchat-gnome | Ubuntu | wily | * |