CVE-2004-2466

60Vexday Risk Score

Patch soon. It has a working public exploit.

ssvc Attendepss 75%

from disclosure to weapon1812 days

Published on NVDAug 20

1st PoC+1812d

metasploit+724d

exploitation probability

75%top 1% of all CVEs

observed exploitation

nono source reports it

6 public exploit(s)

chat.ghp in Easy Chat Server 1.2 allows remote attackers to cause a denial of service (server crash) via a long username parameter, possibly due to a buffer overflow. NOTE: it was later reported that 2.2 is also affected.

Affected products

n/a · n/a

public PoCs found — 6✓ VexDay Proof

exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/16772 exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/33326 cve_reference✓ VexDay Proofwww.exploit-db.com/exploits/4289 exploitdbwww.exploit-db.com/exploits/50999unverified cve_referencepacketstormsecurity.com/files/167892/Easy-Chat-Server-3.1-Buffer-Overflow.htmlunverified cve_referencewww.exploit-db.com/exploits/33326unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

References

http://archives.neohapsis.com/archives/bugtraq/2004-07/0013.html http://archives.neohapsis.com/archives/fulldisclosure/2004-07/0077.html http://packetstormsecurity.com/files/167892/Easy-Chat-Server-3.1-Buffer-Overflow.html http://secunia.com/advisories/12006 http://secunia.com/advisories/26461 http://secunia.com/advisories/58427 https://exchange.xforce.ibmcloud.com/vulnerabilities/16629 https://exchange.xforce.ibmcloud.com/vulnerabilities/36013 https://www.exploit-db.com/exploits/4289 http://www.autistici.org/fdonato/advisory/EasyChatServer1.2-adv.txt http://www.exploit-db.com/exploits/33326 http://www.osvdb.org/7416