Easy Chat Server Stack-Based Buffer Overflow Vulnerability

Bugtraq ID:	67384
Class:	Boundary Condition Error
CVE:	CVE-2004-2466
Remote:	Yes
Local:	No
Published:	May 09 2014 12:00AM
Updated:	Apr 13 2015 09:01PM
Credit:	superkojiman
Vulnerable:
Not Vulnerable:

Easy Chat Server Stack-Based Buffer Overflow Vulnerability

Easy Chat Server is prone to a stack-based buffer-overflow vulnerability because the application fails to properly bounds-check user-supplied data before copying it into an insufficiently sized buffer.

Successful exploits may allow an attacker to execute arbitrary code in context of an affected application. Failed attempts will likely cause a denial-of-service condition.

Easy Chat Server 3.1 is vulnerable; other versions may also be affected.

Easy Chat Server Stack-Based Buffer Overflow Vulnerability

The following exploit code is available:

• /data/vulnerabilities/exploits/67384.txt

Easy Chat Server Stack-Based Buffer Overflow Vulnerability

Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Easy Chat Server Stack-Based Buffer Overflow Vulnerability

References:

• Easy Chat Server Homepage (EFS Software)