Multiple buffer overflows in Melange Chat server 2.02 allow remote or local attackers to cause a denial of service (crash) and possibly execute arbitrary code via (1) a long argument in the /yell command, (2) long lines in the /etc/melange.conf configuration file, (3) long file names, or possibly other attacks.
References
Configurations
History
20 Nov 2024, 23:39
Type | Values Removed | Values Added |
---|---|---|
References | () http://archives.neohapsis.com/archives/bugtraq/2002-04/0157.html - Exploit, Vendor Advisory | |
References | () http://online.securityfocus.com/archive/1/267932 - Exploit | |
References | () http://www.iss.net/security_center/static/8842.php - | |
References | () http://www.iss.net/security_center/static/8845.php - Patch, Vendor Advisory | |
References | () http://www.iss.net/security_center/static/8846.php - | |
References | () http://www.securityfocus.com/bid/4508 - | |
References | () http://www.securityfocus.com/bid/4509 - | |
References | () http://www.securityfocus.com/bid/4510 - Vendor Advisory |
Information
Published : 2002-07-03 04:00
Updated : 2025-04-03 01:03
NVD link : CVE-2002-0552
Mitre link : CVE-2002-0552
CVE.ORG link : CVE-2002-0552
JSON object : View
Products Affected
melange
- melange_chat_system
CWE