SpyNet Chat Server Multiple Connection Denial Of Service Vulnerability

Bugtraq ID:	2701
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2001-0581
Remote:	Yes
Local:	No
Published:	May 07 2001 12:00AM
Updated:	Jul 11 2009 06:06AM
Credit:	This vulnerability was announced to Bugtraq on May 7, 2001 by nemesystm <[email protected]>.
Vulnerable:	Spytech Spynet Chat 6.5 - Microsoft Windows 2000 Professional - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows 98SE - Microsoft Windows ME - Microsoft Windows NT 4.0
Not Vulnerable:

SpyNet Chat Server Multiple Connection Denial Of Service Vulnerability

Spynet Chat Server is a freely available client-server chat package by Spytech Software. Spynet Chat offers IRC style chat to users of the software package.

A problem in the package could allow remote users to crash the chat server. Upon receiving 100 connection requests from a host within a short period of time, and then receiving a message from same host via the chat client, the chat server exits abnormally. A manual restart is required to resume service.

This problem makes it possible for remote users to crash a Spynet Chat Server, denying service to legimate users.

SpyNet Chat Server Multiple Connection Denial Of Service Vulnerability

x

• /data/vulnerabilities/exploits/scs.zip

SpyNet Chat Server Multiple Connection Denial Of Service Vulnerability

Solution:
Currently the SecurityFocus staff are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

SpyNet Chat Server Multiple Connection Denial Of Service Vulnerability

References: