Description
Multiple buffer overflows in Melange Chat server 2.02 allow remote or local attackers to cause a denial of service (crash) and possibly execute arbitrary code via (1) a long argument in the /yell command, (2) long lines in the /etc/melange.conf configuration file, (3) long file names, or possibly other attacks.
Exploits (1)
exploitdb
WORKING POC
VERIFIED
by DVDMAN · perldosmultiple
https://www.exploit-db.com/exploits/21379
References (8)
Scores
EPSS
0.0156
EPSS Percentile
81.6%
Details
Status
published
Products (1)
melange/melange_chat_system
2.0.2_beta_2
Published
Jul 03, 2002
Tracked Since
Feb 18, 2026