CVE-2004-1802: Chat Anywhere 2.72 and earlier allows remote attackers to hide their IP address by using %00 before the nic...

Security readout for executives and security teams

This issue affects Chat Anywhere 2.72 and earlier. A remote user can make the administration page show a placeholder instead of their real IP address, weakening accountability and incident review. The source bundle does not indicate code execution, data theft, or confirmed active exploitation. Exposure is likely limited to organizations still running Chat Anywhere 2.72 or earlier, especially if the chat service is reachable by untrusted users. Modern environments are unlikely to be affected unless this legacy product remains deployed. Treat this as a legacy exposure and logging integrity issue. It should not outrank critical remote compromise vulnerabilities, but any exposed legacy Chat Anywhere service should be retired, isolated, or upgraded promptly because it weakens investigation quality. Mitigation focus: Identify any deployed Chat Anywhere instances and their exact versions.; Remove public access if the product is no longer required.; Check vendor or maintainer guidance for fixed versions or supported replacements..

Prepared

Jun 29, 2026, 21:50 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.