#104 DoS attack found

closed
Bill Tompkins
None
5
2006-01-17
2005-12-07
Martin Perron
No

While I was using M$ Messenger or gaim without the
plugin, My friend always try to send me is key with the
String: *** Encrypted :: Send Key

So in messenger, it paste that String, then, I copy it,
and I repaste the same line: *** Encrypted :: Send Key

His gaim answer with is key:

*** Encrypted :: Key: Prot NSS 1.0: Len
249:gheDDy277lJG2dAeIwzR8gCfG75x1aiD,MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDMRtneVDA7+e8Pa5BxEy4cLxeSGywLfmzEtni0FDa4FwJXwHai5cwJ4QLX/iidp6OibdHooA4Pn1O3AUMvDNY4TNs0ybMr3c6fr0Jkd+mxxdYWf0kHBm07aaJCcEvtJMOiQxxqG5RIVFaLiDbO7b9Xu7aYAgYuWaU4NxjTBqu9zQIDAQAB

Then, I take the same Key and I'll paste it back.

After that, is gaim thing that im encrypt. So he is now
sending me encrypted message.

Example:

*** Encrypted :: Msg 2cac2b7ad1:R2cac2b7ad1: Len
344:ytzEB91tm33MZ27O2pHklhgVxXK81brNJPHhL9wSKQo34Ixejm1FZs41koap+KH+CFCxfBnvpn1m498jrXuCws9LT8VaKQalieGhd2eKXqjswEEb/1kD+DnX5PK1ZS+lFJoNKUnKM4NVXih2Qwh3ZaXTJs+u96xXWTBgUg6jD8UuHANqeUnWS88wGYb+t/I1w00Z/sdKP8grSw4V6a0DywlZUo5o9sbKbpYlUwoTvU5kLkrTRRWZQ58qD6FwimrfZvwhW76UR5OBkk3pv3yyZhbpf34m7DCf8Q4V6DKi//O3cyq1Pvi1hLMX6nqj8U0vxYzZJY7/2VYlBVdN6DDliQ==

I copy and paste it several times and then, he goes
offline.

He just come back after that to tell me that is gaim
just crash on him.

Thank you!

Discussion

  • Bill Tompkins
    Bill Tompkins
    2006-01-02

    Logged In: YES
    user_id=21203

    This should be fixed in the latest beta.

    Thanks for the bug report.

     
  • Bill Tompkins
    Bill Tompkins
    2006-01-02

    • assigned_to: nobody --> obobo
    • status: open --> pending
     
  • Logged In: YES
    user_id=1312539

    This Tracker item was closed automatically by the system. It was
    previously set to a Pending status, and the original submitter
    did not respond within 14 days (the time period specified by
    the administrator of this Tracker).

     
    • status: pending --> closed