CVE-2004-2724

Lionmax Software Chat Anywhere - Authentication Bypass

Title source: rule

Description

LionMax Software Chat Anywhere 2.72a allows remote attackers to cause a denial of service (server crash and client CPU consumption) via a username beginning with percent (%) followed by a null character.

References (6)

[Exploit] http://archives.neohapsis.com/archives/fulldisclosure/2004-08/1183.html

[Vendor Advisory] http://secunia.com/advisories/12398

[Exploit] http://www.autistici.org/fdonato/advisory/ChatAnywhere2.72a-adv.txt

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/17148

[Third Party Advisory, VDB Entry] http://www.osvdb.org/9275

[Third Party Advisory, VDB Entry] http://securitytracker.com/id?1011080

Scores

EPSS 0.0095

EPSS Percentile 76.2%

Classification

CWE

CWE-287

Status draft

Affected Products (1)

lionmax_software/chat_anywhere

Timeline

Published Dec 31, 2004

Tracked Since Feb 18, 2026