TITLE:
Melange Chat Server Information Disclosure Security Issue

SECUNIA ADVISORY ID:
SA18984

VERIFY ADVISORY:
http://secunia.com/advisories/18984/

CRITICAL:
Less critical

IMPACT:
Exposure of sensitive information

WHERE:
>From remote

SOFTWARE:
Melange Chat System 1.x
http://secunia.com/product/880/

DESCRIPTION:
Nexus has discovered a security issue in Melange Chat Server, which
potentially can be exploited by malicious people to disclose certain
sensitive information.

The security issue is caused due to the chat server sending an error
message to all connected users when it receives an unknown command.
The message contains the data that was received. This can potentially
be exploited to disclose the user's cookie by e.g. tricking the user
to connect to the chat server using a browser.

Example:
http://[host]:6666

Successful exploitation requires that the chat server is hosted on
the same domain as a web application that relies on cookie for
session management.

The security issue has been confirmed in version 1.10. Other versions
may also be affected.

SOLUTION:
Use another product.

PROVIDED AND/OR DISCOVERED BY:
Nexus

ORIGINAL ADVISORY:
http://www.oh2600.com/forum/viewtopic.php?t=43

----------------------------------------------------------------------

About:
This Advisory was delivered by Secunia as a free service to help
everybody keeping their systems up to date against the latest
vulnerabilities.

Subscribe:
http://secunia.com/secunia_security_advisories/

Definitions: (Criticality, Where etc.)
http://secunia.com/about_secunia_advisories/


Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

----------------------------------------------------------------------

Unsubscribe: Secunia Security Advisories
http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org

----------------------------------------------------------------------