CVE-2018-25221 - Vulnerability Analysis

Overview

EChat Server 3.1 contains a buffer overflow caused by an oversized username parameter in the chat.ghp endpoint, letting remote attackers execute arbitrary code, exploit requires sending crafted GET requests.

Severity & Score

Impact

Remote attackers can execute arbitrary code, potentially leading to full system compromise.

Mitigation

Update to the latest version of EChat Server.

References

• https://www.exploit-db.com/exploits/44155
• https://www.vulncheck.com/advisories/echat-server-buffer-overflow-via-chat-ghp-username-parameter

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner