CVE-2004-2466

MEDIUM 5.0CVE-2004-2466 · Published 31/12/2004 · updated 16/06/2026

Package	Affected versions	Patched versions
easy chat server efs_software	`= 1.2= 2.2`	No fix yet

Description

chat.ghp in Easy Chat Server 1.2 allows remote attackers to cause a denial of service (server crash) via a long username parameter, possibly due to a buffer overflow. NOTE: it was later reported that 2.2 is also affected.

References

archives.neohapsis.com/archives/bugtraq/2004-07/0013.html · Exploit
archives.neohapsis.com/archives/fulldisclosure/2004-07/0077.html · Exploit
packetstormsecurity.com/files/167892/Easy-Chat-Server-3.1-Buffer-Overflow.html
secunia.com/advisories/12006 · Exploit
secunia.com/advisories/26461 · Vendor Advisory
secunia.com/advisories/58427
autistici.org/fdonato/advisory/EasyChatServer1.2-adv.txt · Exploit
exploit-db.com/exploits/33326
osvdb.org/7416 · Exploit
securityfocus.com/bid/25328
securityfocus.com/bid/67384
vupen.com/english/advisories/2007/2901
exchange.xforce.ibmcloud.com/vulnerabilities/16629
exchange.xforce.ibmcloud.com/vulnerabilities/36013
exploit-db.com/exploits/4289

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free