PT-2002-2571 · Parachat · Parachat Server

Publicado 2002-12-31 · Atualizado 2008-09-05 · CVE-2002-1849

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions ParaChat Server version 4.0

Description The issue allows remote attackers to cause a denial of service by repeatedly logging into a chat room, hitting the back button, then logging into the same chat room as a different user, which fills the chat room with invalid users. This occurs because the ParaChat Server does not log users off when the browser's back button is used.

Recommendations For ParaChat Server version 4.0, consider implementing a mechanism to log users off when the browser's back button is used to prevent denial of service attacks. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Identificadores relacionados

CVE-2002-1849

Produtos afetados

Parachat Server

Referências · 4

• 🔥 http://archives.neohapsis.com/archives/bugtraq/2002-07/0427.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2002-1849 · Nota de Segurança
• http://iss.net/security_center/static/9735.php · Nota
• http://securityfocus.com/bid/5370 · Nota