CVE-2005-2403: Realchat

Medium severity, CVSS 5.0. EPSS: 1.5% chance of exploitation in the next 30 days.

The login protocol in RealChat 3.5.1b does not use authentication, which allows remote attackers to log on as other users by sniffing the beginning of a chat session and replaying it via a modified username.

Affected products

• Realchat Realchat: version 3.5.1b only

Published 2005-07-27. Last modified 2026-06-16.