CVE-2005-0522

CVE-2005-0522 affects Chat Anywhere 2.72a, where passwords are stored in plaintext in the chatroom’s INI file. This enables local users to gain privileges due to insecure credential storage (local privilege escalation). The available sources describe the root cause as plaintext storage, with no d...

CVE-2004-2724

The CVE-2004-2724 entry affects LionMax Software Chat Anywhere 2.72a. A crafted username beginning with a percent sign followed by a null character can trigger a denial of service, causing the server to crash and the client to exhibit high CPU usage. The connected documents confirm this vulnerabi...