CVE-2002-0552

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

Multiple buffer overflows in Melange Chat server 2.02 allow remote or local attackers to cause a denial of service (crash) and possibly execute arbitrary code via (1) a long argument in the /yell command, (2) long lines in the /etc/melange.conf configuration file, (3) long file names, or possibly other attacks.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://archives.neohapsis.com/archives/bugtraq/2002-04/0157.htmlExploit, Vendor Advisory
http://online.securityfocus.com/archive/1/267932Exploit
http://www.iss.net/security_center/static/8842.php
http://www.iss.net/security_center/static/8845.phpPatch, Vendor Advisory
http://www.iss.net/security_center/static/8846.php
http://www.securityfocus.com/bid/4508
http://www.securityfocus.com/bid/4509
http://www.securityfocus.com/bid/4510Vendor Advisory
http://archives.neohapsis.com/archives/bugtraq/2002-04/0157.htmlExploit, Vendor Advisory
http://online.securityfocus.com/archive/1/267932Exploit
http://www.iss.net/security_center/static/8842.php
http://www.iss.net/security_center/static/8845.phpPatch, Vendor Advisory
http://www.iss.net/security_center/static/8846.php
http://www.securityfocus.com/bid/4508
http://www.securityfocus.com/bid/4509
http://www.securityfocus.com/bid/4510Vendor Advisory

Timeline

Published: Jul 3, 2002
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2002

CVE-2002-05537.5Cross-site scripting vulnerability in SunShop 2.5 and earlier allows remote attackers to gain administrative privileges to SunShop by inject CVE-2002-05547.5webdriver in IBM Informix Web DataBlade 4.12 allows remote attackers to bypass user access levels or read arbitrary files via a SQL injectio CVE-2002-05557.5IBM Informix Web DataBlade 4.12 unescapes user input even if an application has escaped it, which could allow remote attackers to execute SQ CVE-2002-05565.0Directory traversal vulnerability in Quik-Serv HTTP server 1.1B allows remote attackers to read arbitrary files via a .. (dot dot) in a URL.CVE-2002-05577.5Vulnerability in OpenBSD 3.0, when using YP with netgroups in the password database, causes (1) rexec or (2) rsh to run another user's shell CVE-2002-05585.0Directory traversal vulnerability in TYPSoft FTP server 0.97.1 and earlier allows a remote authenticated user (possibly anonymous) to list a CVE-2002-05597.5Buffer overflows in PL/SQL module 3.0.9.8.2 in Oracle 9i Application Server 1.0.2.x allow remote attackers to cause a denial of service or e CVE-2002-05605.0PL/SQL module 3.0.9.8.2 in Oracle 9i Application Server 1.0.2.x allows remote attackers to obtain sensitive information via the OWA_UTIL sto CVE-2002-05617.5The default configuration of the PL/SQL Gateway web administration interface in Oracle 9i Application Server 1.0.2.x uses null authenticatio CVE-2002-05625.0The default configuration of Oracle 9i Application Server 1.0.2.x running Oracle JSP or SQLJSP stores globals.jsa under the web root, which CVE-2002-05635.0The default configuration of Oracle 9i Application Server 1.0.2.x allows remote anonymous users to access sensitive services without authent CVE-2002-05647.5PL/SQL module 3.0.9.8.2 in Oracle 9i Application Server 1.0.2.x allows remote attackers to bypass authentication for a Database Access Descr