PT-2005-3317 · Realchat · Realchat

Publicado 2005-07-27 · Atualizado 2017-07-11 · CVE-2005-2403

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions RealChat version 3.5.1b

Description The issue concerns the login protocol, which lacks authentication. This allows remote attackers to log on as other users by sniffing the beginning of a chat session and replaying it via a modified username.

Recommendations For RealChat version 3.5.1b, consider implementing authentication in the login protocol to prevent unauthorized access. As a temporary workaround, restrict access to sensitive features that rely on the login protocol until a proper fix is applied.

Exploit

Correção

Identificadores relacionados

CVE-2005-2403

Produtos afetados

Realchat

Referências · 5

• 🔥 http://seclists.org/lists/bugtraq/2005/Jul/0403.html · Exploit
• http://securitytracker.com/id?1014562 · Nota
• http://securityfocus.com/bid/14358 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/21497 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-2403 · Nota de Segurança