CVE-2006-0917

Severity: low (CVSS 2.1 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2006-02-28 · updated 2026-06-16

Description

Melange Chat Server (aka M-Chat), when accessed via a web browser, automatically sends cookies and other sensitive information for a server to any port specified in the associated link, which allows local users on that server to read the cookies from HTTP headers and possibly gain sensitive information, such as credentials, by setting up a listening port and reading the credentials when the victim clicks on the link.

Affected products

Melange Chat System: 1.10

References

http://secunia.com/advisories/18984
http://securityreason.com/securityalert/463
http://www.oh2600.com/forum/viewtopic.php?t=43
http://www.securityfocus.com/archive/1/425589/100/0/threaded
http://www.securityfocus.com/bid/16747
https://exchange.xforce.ibmcloud.com/vulnerabilities/24868
http://secunia.com/advisories/18984
http://securityreason.com/securityalert/463
http://www.oh2600.com/forum/viewtopic.php?t=43
http://www.securityfocus.com/archive/1/425589/100/0/threaded
http://www.securityfocus.com/bid/16747
https://exchange.xforce.ibmcloud.com/vulnerabilities/24868

Get alerted when CVE-2006-0917 or the next vulnerability affects your stack