CVE-2004-2466

Published: Dec 31, 2004Modified: Apr 16, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

chat.ghp in Easy Chat Server 1.2 allows remote attackers to cause a denial of service (server crash) via a long username parameter, possibly due to a buffer overflow. NOTE: it was later reported that 2.2 is also affected.

Affected (2)

Products: Efs Software: Easy Chat Server

Efs Software

1 product

Easy Chat Server

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Efs Software Easy Chat Server	Version 1.2
Efs Software Easy Chat Server	Version 2.2

Related CWEs

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (30)

http://archives.neohapsis.com/archives/bugtraq/2004-07/0013.html

Source: cve@mitre.org

ExploitVendor Advisory

http://archives.neohapsis.com/archives/fulldisclosure/2004-07/0077.html

Source: cve@mitre.org

ExploitVendor Advisory

http://packetstormsecurity.com/files/167892/Easy-Chat-Server-3.1-Buffer-Overflow.html

Source: cve@mitre.org

http://secunia.com/advisories/12006

Source: cve@mitre.org

ExploitVendor Advisory

http://secunia.com/advisories/26461

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/58427

Source: cve@mitre.org

http://www.autistici.org/fdonato/advisory/EasyChatServer1.2-adv.txt

Source: cve@mitre.org

ExploitVendor Advisory

http://www.exploit-db.com/exploits/33326

Source: cve@mitre.org

http://www.osvdb.org/7416

Source: cve@mitre.org

Exploit

http://www.securityfocus.com/bid/25328

Source: cve@mitre.org

http://www.securityfocus.com/bid/67384

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2007/2901

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/16629

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/36013

Source: cve@mitre.org

https://www.exploit-db.com/exploits/4289

Source: cve@mitre.org

http://archives.neohapsis.com/archives/bugtraq/2004-07/0013.html