CVE-2006-0917
Melange Chat Server (aka M-Chat), when accessed via a web browser, automatically sends cookies...
Melange Chat Server (aka M-Chat), when accessed via a web browser, automatically sends cookies and other sensitive information for a server to any port specified in the associated link, which allows local users on that server to read the cookies from HTTP headers and possibly gain sensitive information, such as credentials, by setting up a listening port and reading the credentials when the victim clicks on the link.
Exploit likelihood
What each source reports
NVD Score used
Melange Chat Server (aka M-Chat), when accessed via a web browser, automatically sends cookies and other sensitive information for a server to any port specified in the associated link, which allows local users on that server to read the cookies from HTTP headers and possibly gain sensitive information, such as credentials, by setting up a listening port and reading the credentials when the victim clicks on the link.
- Record
CVE-2006-0917- CVSS 2.0
- 2.1 Low
AV:L/AC:L/Au:N/C:P/I:N/A:N - Updated
- 2026-11-02
CVE List No score
Melange Chat Server (aka M-Chat), when accessed via a web browser, automatically sends cookies and other sensitive information for a server to any port specified in the associated link, which allows local users on that server to read the cookies from HTTP headers and possibly gain sensitive information, such as credentials, by setting up a listening port and reading the credentials when the victim clicks on the link.
- Record
CVE-2006-0917- Updated
- 2026-11-02
EUVDEUVD-2006-0921 No score
Melange Chat Server (aka M-Chat), when accessed via a web browser, automatically sends cookies and other sensitive information for a server to any port specified in the associated link, which allows local users on that server to read the cookies from HTTP headers and possibly gain sensitive information, such as credentials, by setting up a listening port and reading the credentials when the victim clicks on the link.
- Record
EUVD-2006-0921- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-rw8p-9rcw-27w7 No score
Melange Chat Server (aka M-Chat), when accessed via a web browser, automatically sends cookies...
Melange Chat Server (aka M-Chat), when accessed via a web browser, automatically sends cookies and other sensitive information for a server to any port specified in the associated link, which allows local users on that server to read the cookies from HTTP headers and possibly gain sensitive information, such as credentials, by setting up a listening port and reading the credentials when the victim clicks on the link.
- Record
GHSA-rw8p-9rcw-27w7- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2006-0917 is a low vulnerability (CVSS 2.1) in Melange Chat System, published February 28, 2006. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.35%, the 28th percentile. No source names a fixed version.
References
securityfocus.com/bid/16747
oh2600.com/forum/viewtopic.php?t=43
securityreason.com/securityalert/463
secunia.com/advisories/18984
exchange.xforce.ibmcloud.com/vulnerabilities/24868
nvd.nist.gov/vuln/detail/CVE-2006-0917
github.com/advisories/GHSA-rw8p-9rcw-27w7