CVE-2005-2403

CVE-2005-2403 is a medium-severity vulnerability in Realchat with a CVSS 2.0 base score of 5.0. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low.

Key facts

Description

The login protocol in RealChat 3.5.1b does not use authentication, which allows remote attackers to log on as other users by sniffing the beginning of a chat session and replaying it via a modified username.

Frequently asked questions

What is CVE-2005-2403?
The login protocol in RealChat 3.5.1b does not use authentication, which allows remote attackers to log on as other users by sniffing the beginning of a chat session and replaying it via a modified username.
How severe is CVE-2005-2403?
CVE-2005-2403 has a CVSS 2.0 base score of 5.0, rated medium severity.
Is CVE-2005-2403 being actively exploited?
It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 1% (71st percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2005-2403?
CVE-2005-2403 affects Realchat. See the affected-products list for the exact vulnerable versions.
How do I fix CVE-2005-2403?
Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
When was CVE-2005-2403 published?
CVE-2005-2403 was published on 2005-07-27 and last updated on 2026-06-16.

References

Affected products (1)