CVE-2023-4494
Easy Chat Server Stack-based buffer overflow vulnerability
We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
Easy Chat Server Stack-based buffer overflow vulnerability
| Assigner | INCIBE |
| Reserved | 2023-08-23 |
| Published | 2023-10-04 |
| Updated | 2024-09-05 |
Stack-based buffer overflow vulnerability in Easy Chat Server 3.1 version. An attacker could send an excessively long username string to the register.ghp file asking for the name via a GET request resulting in arbitrary code execution on the remote machine.
| CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer
Rafael Pedrero
https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-efs-software-products
