https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2006-0917.htmlhttps://patchthecve.com/cve/CVE-2006-0917.htmlTue, 16 Jun 2026 22:21:33 +0000LOW 2.1: Melange Chat Server (aka M-Chat), when accessed via a web browser, automatically sends cookies and other sensitive information for a server to any port specified in the associated link, which allows local users on that server to read the cookies from HTTP headers and possibly gain sensitive informathttps://patchthecve.com/cve/CVE-2002-1351.htmlhttps://patchthecve.com/cve/CVE-2002-1351.htmlTue, 16 Jun 2026 21:59:09 +0000MEDIUM 5.0: Buffer overflow in Melange Chat System 1.10 allows remote attackers to cause a denial of service (chat server crash) and possibly execute arbitrary code via the msgText buffer in the chat_InterpretData function, as demonstrated via a long Nick (nickname) request.https://patchthecve.com/cve/CVE-2002-0552.htmlhttps://patchthecve.com/cve/CVE-2002-0552.htmlTue, 16 Jun 2026 21:57:39 +0000HIGH 7.5: Multiple buffer overflows in Melange Chat server 2.02 allow remote or local attackers to cause a denial of service (crash) and possibly execute arbitrary code via (1) a long argument in the /yell command, (2) long lines in the /etc/melange.conf configuration file, (3) long file names, or possibly ot