CVE-2004-2724

Loading...

General

Score:7.1/10.0
Severity:Medium
Category:Access Control Error

Impact Metrics

Confidentiality:None
Integrity:None
Availability:Complete

Exploitability Metrics

Access Vector:Network
Access Complexity:Medium
Authentication:None

Published on 31/12/04 - Updated on 29/07/17

Description

LionMax Software Chat Anywhere 2.72a allows remote attackers to cause a denial of service (server crash and client CPU consumption) via a username beginning with percent (%) followed by a null character.

Category: Access Control Error

CWE-287 (Authentication Issues)
When an actor claims to have a given identity, the software does not prove or insufficiently proves that the claim is correct.

Security Notices

US National Vulnerability DatabaseCVE-2004-2724

Exploits

No exploits available for this CVE in our database.

Relative technologies

VendorProduct
lionmax_softwarechat_anywhere

Share this vulnerability with:

Twitter Facebook LinkedIn Mail