PT-2004-3536 · Unknown · Free Web Chat

Donato Ferrante · Published 2004-12-31 · Updated 2017-07-20 · CVE-2004-2646

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Free Web Chat version 2.0

Description The issue concerns the addUser function in UserManager.java, which can be exploited by remote attackers to cause a denial of service. This is achieved by causing the usrName variable to be null, although the specific attack vectors are not detailed.

Recommendations For Free Web Chat version 2.0, consider adding a null check for the usrName variable in the addUser function to prevent the NullPointerException and subsequent denial of service.

Exploit

Fix

Related Identifiers

CVE-2004-2646

Affected Products

Free Web Chat

References · 8

• 🔥 https://exploit-db.com/exploits/24351 · Exploit
• 🔥 http://securitytracker.com/alerts/2004/Aug/1010851.html · Exploit
• 🔥 http://securityfocus.com/bid/10863 · Exploit
• 🔥 http://archives.neohapsis.com/archives/fulldisclosure/2004-08/0102.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2004-2646 · Security Note
• http://osvdb.org/8369 · Note
• http://marc.info/?l=bugtraq&m=109164397601049&w=2 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/16893 · Note