CVE-2002-1351

MediumCVSS 5.0/10Last modified Jun 16, 2026

Description

Buffer overflow in Melange Chat System 1.10 allows remote attackers to cause a denial of service (chat server crash) and possibly execute arbitrary code via the msgText buffer in the chat_InterpretData function, as demonstrated via a long Nick (nickname) request.

Metrics

CVSS 2.0 5.0/10AV:N/AC:L/Au:N/C:N/I:N/A:P

Affected software

VendorProductVersions
n/an/an/a

References

Timeline

Published
Dec 24, 2002
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2002

CVE-2002-13525.0Per Magne Knutsen's CartMan shopping cart (cartman.php) 1.04 and earlier allows remote attackers to modify product prices by changing the prCVE-2002-13535.0LocalWEB2000 HTTP server 2.1.0 stores passwords in plain text under the web document root in users.lst, which allows remote attackers to obtCVE-2002-13545.0Directory traversal vulnerability in TYPSoft FTP Server 0.99.8 allows local users to list the contents of arbitrary directories via a ... (dCVE-2002-13555.0Multiple integer signedness errors in the BGP dissector in Ethereal 0.9.7 and earlier allow remote attackers to cause a denial of service (iCVE-2002-13567.5Ethereal 0.9.7 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via malformed paCVE-2002-135710.0Multiple SSH2 servers and clients do not properly handle packets or data elements with incorrect length specifiers, which may allow remote aCVE-2002-135810.0Multiple SSH2 servers and clients do not properly handle lists with empty elements or strings, which may allow remote attackers to cause a dCVE-2002-135910.0Multiple SSH2 servers and clients do not properly handle large packets or large fields, which may allow remote attackers to cause a denial oCVE-2002-136010.0Multiple SSH2 servers and clients do not properly handle strings with null characters in them when the string length is specified by a lengtCVE-2002-136110.0overflow.cgi CGI script in Sun Cobalt RaQ 4 with the SHP (Security Hardening Patch) installed allows remote attackers to execute arbitrary cCVE-2002-13625.0mICQ 0.4.9 and earlier allows remote attackers to cause a denial of service (crash) via malformed ICQ message types without a 0xFE separatorCVE-2002-13637.5Portable Network Graphics (PNG) library libpng 1.2.5 and earlier does not correctly calculate offsets, which allows remote attackers to caus
CVE-2002-1351: Medium severity, CVSS 5.0 | Vulnix