medium5.0Public exploit code
CVE-2002-1351
Buffer overflow in Melange Chat System 1.10 allows remote attackers to cause a denial of service (chat server crash) and possibly execute arbitrary code via th…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Melange Chat Server 1.10 - Remote Buffer Overflow2002-12-24 · remote · linux · Verified
Impact
Buffer overflow in Melange Chat System 1.10 allows remote attackers to cause a denial of service (chat server crash) and possibly execute arbitrary code via the msgText buffer in the chat_InterpretData function, as demonstrated via a long Nick (nickname) request.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Melange | Melange Chat System | Version 1.10 |
References
- NVD record
- CVE.org record
- http://securitytracker.com/id?1005831
- http://www.idefense.com/application/poi/display?id=33&type=vulnerabilities&flashstatus=false
- http://www.securityfocus.com/bid/6477
- https://exchange.xforce.ibmcloud.com/vulnerabilities/10939
- http://securitytracker.com/id?1005831
- http://www.idefense.com/application/poi/display?id=33&type=vulnerabilities&flashstatus=false
- http://www.securityfocus.com/bid/6477
- https://exchange.xforce.ibmcloud.com/vulnerabilities/10939