CVE-2004-2460 Unknown vulnerability in POP3 in gnubiff before 2.0.0 allows remote attackers to cause a denial of service (application crash) via an "infinite" Unique IDentification Listing (UIDL) list.
MediumCVSS 5.0
EPSS 1.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Unknown vulnerability in POP3 in gnubiff before 2.0.0 allows remote attackers to cause a denial of service (application crash) via an "infinite" Unique IDentification Listing (UIDL) list.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| gnubiff | = 1.0.3 | No fix listed |
| gnubiff | = 1.0.4 | No fix listed |
| gnubiff | = 1.0.5 | No fix listed |
| gnubiff | = 1.0.6 | No fix listed |
| gnubiff | = 1.0.7 | No fix listed |
| gnubiff | = 1.0.8 | No fix listed |
| gnubiff | = 1.0.9 | No fix listed |
| gnubiff | = 1.0.10 | No fix listed |
| gnubiff | = 1.2.0 | No fix listed |
| gnubiff | = 1.4.0 | No fix listed |
| debian/gnubiff(Debian:12) | < 2.0.0 | 2.0.0 |
| debian/gnubiff(Debian:13) | < 2.0.0 | 2.0.0 |
| debian/gnubiff(Debian:14) | < 2.0.0 | 2.0.0 |
References
- gnubiff.sourceforge.net
- 12445 patch third-party-advisory vendor-advisory
- 9731 vdb-entry
- 11123 patch vdb-entry
- gnubiff-pop3-dos(17282) vdb-entry
- Debian Security Tracker CVE-2004-2460 vendor-advisory