Multiple Vulnerabilities in Easy Chat Server 1.2

Donato Ferrante Application: Easy Chat Server http://www.echatserver.com/ Version: 1.2 Bugs: Multiple Vulnerabilities Date: 02-Jul-2004 Author: Donato Ferrante e-mail: [email protected] web: www.autistici.org/fdonato xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx 1...

[Full-Disclosure] XSS in SCI Photo Chat Server 3.4.9

Donato Ferrante Application: SCI Photo Chat Server http://www.simmcomm.ch/ Version: 3.4.9 Bug: cross site scripting Date: 02-Jul-2004 Author: Donato Ferrante e-mail: [email protected] web: www.autistici.org/fdonato xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx 1...

Easy Chat Server 1.x - Multiple Denial of Service Vulnerabilities

source: https://www.securityfocus.com/bid/10649/info It is reported that Easy Chat Server is susceptible to multiple denial of service vulnerabilities. The chat software is implemented as a web server serving a chat web application to clients. The software is reported to contain two denial of...

Easy Chat Server 1.x - Multiple Denial of Service Vulnerabilities

Easy Chat Server 1.x - Multiple Denial of Service Vulnerabilities source: https://www.securityfocus.com/bid/10649/info It is reported that Easy Chat Server is susceptible to multiple denial of service vulnerabilities. The chat software is implemented as a web server serving a chat web application...

[NT] ignitionServer Server Linking Password Verification Vulnerability

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

Scorched 3D server chat box format string vulnerability

Background Scorched 3D is a game based loosely on the classic DOS game "Scorched Earth". Scorched 3D adds amongst other new features a 3D island environment and LAN and internet play. Scorched 3D is totally free and is available for multiple operating systems. Description Scorched 3D build 36.2 a...

The Palace 3.x (Client) Stack Overflow Vulnerability

The Palace 3.x Client Stack Overflow Vulnerability Credit: Author : Peter Winter-Smith Software: Packages : The Palace 3.5 Client Version : 3.5 and below Vendor : 'Copyright © 1996-2000 Communities.com' Vendor Url : http://www.thepalace.com/ Vulnerability: Bug Type : Stack-based Buffer Overflow...

Denial Of Service in ChatterBox 2.0

Donato Ferrante Application: ChatterBox http://www.urbancities.net/burton/ Version: 2.0 Bug: Denial Of Service Author: Donato Ferrante e-mail: [email protected] web: www.autistici.org/fdonato xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx 1. Description 2. The bug 3...

CVE-2003-1540

WF-Chat 1.0 Beta stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain authentication information via a direct request to 1 !pwds.txt and 2 !nicks.txt...

X-Chat 2.0.6 - Remote Denial of Service

X-Chat 2.0.6 - Remote Denial of Service source: https://www.securityfocus.com/bid/9217/info It has been reported that X-Chat may be prone to a remote denial of service vulnerability that may allow an attacker to crash the client by sending a malicious 'DDC SEND' request. X-Chat version 2.0.6...

X-Chat 2.0.6 - Remote Denial of Service

source: https://www.securityfocus.com/bid/9217/info It has been reported that X-Chat may be prone to a remote denial of service vulnerability that may allow an attacker to crash the client by sending a malicious 'DDC SEND' request. X-Chat version 2.0.6 running on a Linux platform has been reporte...

DEBIAN-CVE-2003-0864

Buffer overflow in mjoin in channel.c for IRCnet IRCD 2.10.x to 2.10.3p3 allows remote attackers to cause a denial of service...

OptiSoft Blubster 2.5 - Remote Denial of Service

// source: https://www.securityfocus.com/bid/8482/info t has been reported that Blubster is prone to a remote denial of service vulnerability due to a port flooding attack on TCP port 701. The problem is reported to present itself when a remote attacker floods port 701 with voice chat session...

Trillian v.0.74* Remote DoS

Advisory Название : Trillian v.0.74 - удаленная DoS Сайт : www.trillian.cc Платформа : win32 Автор : lobsta/h [email protected] Информация о программном продукте Trillian - популярный чат-клиент, поддерживающий IRC, AIM, ICQ, MSN Messenger, и Yahoo! Messenger. Примечание к статье Основным отличие...

WF-Chat User Account Disclosure

The WF-Chat allows an attacker to view information about registered users by requesting the files '!nicks.txt' and '!pwds.txt'. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid11688; scriptversion"1.23";...

Yahoo! Voice Chat ActiveX Control 1.0.0.43 - Remote Buffer Overflow

Yahoo! Voice Chat ActiveX Control 1.0.0.43 - Remote Buffer Overflow source: https://www.securityfocus.com/bid/7561/info It has been reported that the ActiveX control used by the Yahoo! Voice Chat feature is prone to an exploitable buffer overflow vulnerability. This issue can be exploited via a...

Yahoo! Voice Chat ActiveX Control 1.0.0.43 - Remote Buffer Overflow

source: https://www.securityfocus.com/bid/7561/info It has been reported that the ActiveX control used by the Yahoo! Voice Chat feature is prone to an exploitable buffer overflow vulnerability. This issue can be exploited via a malicious web page that calls the vulnerable control with malformed...

12Planet Chat Server Administration Authentication Cleartext Credential Disclosure

The remote host is running 12Planet Chat Server, a web-based chat server written in Java. It is, therefore, affected by a credential disclosure vulnerability due to connections to this server being done via cleartext. A man-in-the-middle attacker can exploit this vulnerability to obtain the...

12Planet Chat Server Error Message Path Disclosure

The remote host is running 12Planet Chat Server - a web-based chat server written in Java. There is a flaw in this version which allows an attacker to obtain the physical path of the installation by sending a malformed request to this service. Knowing this information will help an attacker to mak...

Code Injection Vulnerabilities in WebcamXP Chat Feature

=========================================================================== ==== FRAME4 SECURITY ADVISORY FSA-2003:002 --------------------------------------------------------------------------- ---- PRODUCT : WebcamXP PRODUCT/VENDOR URL : http://www.darkwet.net/ TYPE : Vulnerability / Exploit...