Spynet Chat Server Denial of Service Vulnerability

vendor:

Spynet Chat Server

by:

SecurityFocus

7.5

CVSS

HIGH

Denial of Service

399

CWE

Product Name: Spynet Chat Server

Affected Version From: N/A

Affected Version To: N/A

Patch Exists: Yes

Related CWE: N/A

CPE: N/A

Metasploit: N/A

Other Scripts: N/A

Tags: N/A

CVSS Metrics: N/A

Nuclei References: N/A

Nuclei Metadata: N/A

Platforms Tested: N/A

2002

Spynet Chat Server Denial of Service Vulnerability

A problem in the package could allow remote users to crash the chat server. Upon receiving 100 connection requests from a host within a short period of time, and then receiving a message from same host via the chat client, the chat server exits abnormally. A manual restart is required to resume service.

Mitigation:

Upgrade to the latest version of Spynet Chat Server.

Source

Exploit-DB raw data:

source: https://www.securityfocus.com/bid/2701/info

Spynet Chat Server is a freely available client-server chat package by Spytech Software. Spynet Chat offers IRC style chat to users of the software package.

A problem in the package could allow remote users to crash the chat server. Upon receiving 100 connection requests from a host within a short period of time, and then receiving a message from same host via the chat client, the chat server exits abnormally. A manual restart is required to resume service.

This problem makes it possible for remote users to crash a Spynet Chat Server, denying service to legimate users. 

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/20828.zip