Bird Chat Remote Denial Of Service Vulnerability

Bugtraq ID:	11010
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	Yes
Local:	No
Published:	Aug 23 2004 12:00AM
Updated:	Aug 23 2004 12:00AM
Credit:	Discovery of this issue is credited to "Donato Ferrante" <[email protected]>.
Vulnerable:	Bird Chat Internet Chat Server 1.61
Not Vulnerable:

Bird Chat Remote Denial Of Service Vulnerability

Bird Chat has been reported to be affected by a remote denial of service vulnerability. This issue is likely due to a failure of the application to properly sanitize user-supplied input, although this is not confirmed.

An attacker can leverage this issue to cause all chat clients connected to a vulnerable server to crash, denying service to legitimate users.

Bird Chat Remote Denial Of Service Vulnerability

The following exploit has been provided:

• /data/vulnerabilities/exploits/birdCahtDOSExploit.java

Bird Chat Remote Denial Of Service Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Bird Chat Remote Denial Of Service Vulnerability

References:

• Project Home Page (Bird Chat)
  
• DoS in Bird Chat 1.61 ("Donato Ferrante" )