PT-2004-3536 · Unknown · Free Web Chat

Donato Ferrante · Publicado 2004-12-31 · Atualizado 2017-07-20 · CVE-2004-2646

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Free Web Chat version 2.0

Description The issue concerns the addUser function in UserManager.java, which can be exploited by remote attackers to cause a denial of service. This is achieved by causing the usrName variable to be null, although the specific attack vectors are not detailed.

Recommendations For Free Web Chat version 2.0, consider adding a null check for the usrName variable in the addUser function to prevent the NullPointerException and subsequent denial of service.

Exploit

Correção

Identificadores relacionados

CVE-2004-2646

Produtos afetados

Free Web Chat

Referências · 8

• 🔥 https://exploit-db.com/exploits/24351 · Exploit
• 🔥 http://securitytracker.com/alerts/2004/Aug/1010851.html · Exploit
• 🔥 http://securityfocus.com/bid/10863 · Exploit
• 🔥 http://archives.neohapsis.com/archives/fulldisclosure/2004-08/0102.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2004-2646 · Nota de Segurança
• http://osvdb.org/8369 · Nota
• http://marc.info/?l=bugtraq&m=109164397601049&w=2 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/16893 · Nota