CVE-2004-2466
60Vexday Risk Score
Corrija em breve. Ela tem exploit funcional público.
ssvc Attendepss 75%
da publicação à arma1812 dias
Publicada no NVD20 de ago.
1ª PoC+1812d
metasploit+724d
probabilidade de exploração
75%top 1% das CVEs
exploração observada
nãonenhuma fonte reporta
6 exploit(s) público(s)
chat.ghp in Easy Chat Server 1.2 allows remote attackers to cause a denial of service (server crash) via a long username parameter, possibly due to a buffer overflow. NOTE: it was later reported that 2.2 is also affected.
Produtos afetados
n/a · n/aPoCs públicas encontradas — 6✓ VexDay Proof
exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/16772exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/33326cve_reference✓ VexDay Proofwww.exploit-db.com/exploits/4289exploitdbwww.exploit-db.com/exploits/50999não verificadocve_referencepacketstormsecurity.com/files/167892/Easy-Chat-Server-3.1-Buffer-Overflow.htmlnão verificadocve_referencewww.exploit-db.com/exploits/33326não verificado⚠ Recursos públicos, para você avaliar a exposição de sistemas que controla ou está autorizado a testar. Teste apenas com autorização.
Referências
http://archives.neohapsis.com/archives/bugtraq/2004-07/0013.htmlhttp://archives.neohapsis.com/archives/fulldisclosure/2004-07/0077.htmlhttp://packetstormsecurity.com/files/167892/Easy-Chat-Server-3.1-Buffer-Overflow.htmlhttp://secunia.com/advisories/12006http://secunia.com/advisories/26461http://secunia.com/advisories/58427https://exchange.xforce.ibmcloud.com/vulnerabilities/16629https://exchange.xforce.ibmcloud.com/vulnerabilities/36013https://www.exploit-db.com/exploits/4289http://www.autistici.org/fdonato/advisory/EasyChatServer1.2-adv.txthttp://www.exploit-db.com/exploits/33326http://www.osvdb.org/7416