CVE-2004-2647

Free Web Chat 2.0 - Denial of Service via Multiple Connections

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2004-2647. PoCs published by Donato Ferrante.

AI-analyzed exploit summary This PoC exploits a resource consumption vulnerability in Free Web Chat server by establishing multiple connections from the same location, leading to a denial of service. It sends a simple 'test' string over each connection to trigger the issue.

Description

Free Web Chat 2.0 allows remote attackers to cause a denial of service (CPU consumption) via multiple connections from the same user.

Exploits (1)

exploitdb WORKING POC VERIFIED
by Donato Ferrante · javadosmultiple
https://www.exploit-db.com/exploits/24352

This PoC exploits a resource consumption vulnerability in Free Web Chat server by establishing multiple connections from the same location, leading to a denial of service. It sends a simple 'test' string over each connection to trigger the issue.

Classification
Working Poc 95%
Attack Type
Dos
Complexity
Trivial
Reliability
Reliable
Target: Free Web Chat (Initial Release)
No auth needed
Prerequisites: Network access to the target server · Target server running Free Web Chat (Initial Release)
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (6)

Core 6
Core References
Mailing List mailing-list x_refsource_bugtraq
http://marc.info/?l=bugtraq&m=109164397601049&w=2
Exploit vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/10863
Exploit, Patch vdb-entry x_refsource_sectrack
http://securitytracker.com/alerts/2004/Aug/1010851.html
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/16901
Exploit, Patch mailing-list x_refsource_fulldisc
http://archives.neohapsis.com/archives/fulldisclosure/2004-08/0102.html
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://www.osvdb.org/8370

Scores

EPSS 0.0362
EPSS Percentile 88.0%

Details

Status published
Published Dec 31, 2004
Tracked Since Feb 18, 2026