Description
EChat Server 3.1 contains a buffer overflow vulnerability in the chat.ghp endpoint that allows remote attackers to execute arbitrary code by supplying an oversized username parameter. Attackers can send a GET request to chat.ghp with a malicious username value containing shellcode and ROP gadgets to achieve code execution in the application context.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Echatserver | EChat Server | 3.1 | — |
References
- ExploitDB-44155 exploit
- VulnCheck Advisory: EChat Server 3.1 Buffer Overflow via chat.ghp username Parameter third-party-advisory