Multiple Free Web Chat Denial Of Service Vulnerabilities
BID:10863
Info
Multiple Free Web Chat Denial Of Service Vulnerabilities
| Bugtraq ID: | 10863 |
| Class: | Design Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Aug 04 2004 12:00AM |
| Updated: | Aug 04 2004 12:00AM |
| Credit: | Discovery of these vulnerabilities is credited to "Donato Ferrante" <[email protected]>. |
| Vulnerable: |
Free Web Chat Free Web Chat Initial Release |
| Not Vulnerable: | |
Discussion
Multiple Free Web Chat Denial Of Service Vulnerabilities
Free Web Chat server is reported prone to multiple denial of service vulnerabilities. The following issues are reported:
The first denial of service vulnerability reported results from a lack of sufficient sanitization performed on username data. It is reported that a user with a void name may be added. This action will result in a NullPointerException.
A remote attacker may exploit this vulnerability to deny service to legitimate users.
The second denial of service vulnerability is reported to exist due to resource consumption. It is reported that the Free Web Chat server does not properly manage multiple connections that originate from the same location.
A remote attacker may exploit this vulnerability to deny service to legitimate users.
Free Web Chat server is reported prone to multiple denial of service vulnerabilities. The following issues are reported:
The first denial of service vulnerability reported results from a lack of sufficient sanitization performed on username data. It is reported that a user with a void name may be added. This action will result in a NullPointerException.
A remote attacker may exploit this vulnerability to deny service to legitimate users.
The second denial of service vulnerability is reported to exist due to resource consumption. It is reported that the Free Web Chat server does not properly manage multiple connections that originate from the same location.
A remote attacker may exploit this vulnerability to deny service to legitimate users.
Exploit / POC
Multiple Free Web Chat Denial Of Service Vulnerabilities
The following exploits are available:
The following exploits are available:
Solution / Fix
Multiple Free Web Chat Denial Of Service Vulnerabilities
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
Multiple Free Web Chat Denial Of Service Vulnerabilities
References:
References:
- Free Web Chat Homepage (Free Web Chat)
- Multiple Vulnerabilities in Free Web Chat ("Donato Ferrante"