CVE-2004-2466
60Vexday Risk Score
Corrige pronto. Ella tiene exploit funcional público.
ssvc Attendepss 75%
de la publicación al arma1812 días
Publicada en NVD20 ago
1ª PoC+1812d
metasploit+724d
probabilidad de explotación
75%top 1% de las CVE
explotación observada
noninguna fuente lo reporta
6 exploit(s) público(s)
chat.ghp in Easy Chat Server 1.2 allows remote attackers to cause a denial of service (server crash) via a long username parameter, possibly due to a buffer overflow. NOTE: it was later reported that 2.2 is also affected.
Productos afectados
n/a · n/aPoCs públicas encontradas — 6✓ VexDay Proof
exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/16772exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/33326cve_reference✓ VexDay Proofwww.exploit-db.com/exploits/4289exploitdbwww.exploit-db.com/exploits/50999no verificadocve_referencepacketstormsecurity.com/files/167892/Easy-Chat-Server-3.1-Buffer-Overflow.htmlno verificadocve_referencewww.exploit-db.com/exploits/33326no verificado⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.
Referencias
http://archives.neohapsis.com/archives/bugtraq/2004-07/0013.htmlhttp://archives.neohapsis.com/archives/fulldisclosure/2004-07/0077.htmlhttp://packetstormsecurity.com/files/167892/Easy-Chat-Server-3.1-Buffer-Overflow.htmlhttp://secunia.com/advisories/12006http://secunia.com/advisories/26461http://secunia.com/advisories/58427https://exchange.xforce.ibmcloud.com/vulnerabilities/16629https://exchange.xforce.ibmcloud.com/vulnerabilities/36013https://www.exploit-db.com/exploits/4289http://www.autistici.org/fdonato/advisory/EasyChatServer1.2-adv.txthttp://www.exploit-db.com/exploits/33326http://www.osvdb.org/7416