Melange Chat Systems melange.conf Buffer Overflow Vulnerability
BID:4509
Info
Melange Chat Systems melange.conf Buffer Overflow Vulnerability
| Bugtraq ID: | 4509 |
| Class: | Boundary Condition Error |
| CVE: |
CVE-2002-0552 |
| Remote: | No |
| Local: | Yes |
| Published: | Apr 14 2002 12:00AM |
| Updated: | Jul 11 2009 11:56AM |
| Credit: | Discovered by Leon Harris <[email protected]>. |
| Vulnerable: |
Melange Melange Chat System 2.0.2 Beta 2 |
| Not Vulnerable: | |
Discussion
Melange Chat Systems melange.conf Buffer Overflow Vulnerability
Melange Chat System is a chat application developed by Christian Walter. Currently support for this program is no longer available.
An issue has been reported in Melange, which could allow an attacker to initiate a buffer overflow.
Reportedly, including an unusally long line in the configuration file could cause the buffer to overflow.
Melange Chat System is a chat application developed by Christian Walter. Currently support for this program is no longer available.
An issue has been reported in Melange, which could allow an attacker to initiate a buffer overflow.
Reportedly, including an unusally long line in the configuration file could cause the buffer to overflow.
Exploit / POC
Melange Chat Systems melange.conf Buffer Overflow Vulnerability
Currently the SecurityFocus staff are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Currently the SecurityFocus staff are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution / Fix
Melange Chat Systems melange.conf Buffer Overflow Vulnerability
Solution:
The discoverer of this issue Leon Harris <[email protected]>, has released a patch for this issue. Administrators who intend to apply this patch should be aware that this is an unofficial patch, and should be handled accordingly. The patch is available in the message listed in the references section of this alert.
Currently the SecurityFocus staff are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
The discoverer of this issue Leon Harris <[email protected]>, has released a patch for this issue. Administrators who intend to apply this patch should be aware that this is an unofficial patch, and should be handled accordingly. The patch is available in the message listed in the references section of this alert.
Currently the SecurityFocus staff are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
Melange Chat Systems melange.conf Buffer Overflow Vulnerability
References:
References:
- Melange Homepage (Christian Walter)