CVE-2004-2724

Published: Dec 31, 2004Modified: Apr 16, 2026

7.1

Vector

AV:N/AC:M/Au:N/C:N/I:N/A:C

Exploitability: 8.6 / Impact: 6.9

Source: NVD

Description

LionMax Software Chat Anywhere 2.72a allows remote attackers to cause a denial of service (server crash and client CPU consumption) via a username beginning with percent (%) followed by a null character.

Affected (1)

Products: Lionmax Software: Chat Anywhere

Lionmax Software

1 product

Chat Anywhere

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Lionmax Software Chat Anywhere	Version 2.72a

Related CWEs

CWE-287

Improper Authentication

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

References (12)

http://archives.neohapsis.com/archives/fulldisclosure/2004-08/1183.html

Source: cve@mitre.org

Exploit

http://secunia.com/advisories/12398

Source: cve@mitre.org

Vendor Advisory

http://securitytracker.com/id?1011080

Source: cve@mitre.org

http://www.autistici.org/fdonato/advisory/ChatAnywhere2.72a-adv.txt

Source: cve@mitre.org

Exploit

http://www.osvdb.org/9275

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/17148

Source: cve@mitre.org

http://archives.neohapsis.com/archives/fulldisclosure/2004-08/1183.html