Vulnerability in Realchat

CVE-2005-2403

The login protocol in RealChat 3.5.1b does not use authentication, which allows remote attackers to log on as other users by sniffing the beginning of a chat session and replaying it via a modified username.

EPSS: 0.015 (71.5th percentile) — read the EPSS interpretation.

Affected products

Realchat — versions 3.5.1b
N/a — versions n/a

References

cve@mitre.org (vdb-entry, x_refsource_BID)
cve@mitre.org (Vendor Advisory, mailing-list, Exploit, x_refsource_BUGTRAQ)
cve@mitre.org (vdb-entry, x_refsource_XF)
cve@mitre.org (vdb-entry, x_refsource_SECTRACK)