First published: Fri Aug 20 2004(Updated: )
signup_page.php in Mantis bugtracker allows remote attackers to send e-mail bombs by creating multiple users and providing the same e-mail address.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Mentiss Acgv Acgvannu | =0.10.2 | |
Mentiss Acgv Acgvannu | =0.10 | |
Mentiss Acgv Acgvannu | =0.14.7 | |
Mentiss Acgv Acgvannu | =0.15.12 | |
Mentiss Acgv Acgvannu | =0.18.0a2 | |
Mentiss Acgv Acgvannu | =0.18.0a4 | |
Mentiss Acgv Acgvannu | =0.15.3 | |
Mentiss Acgv Acgvannu | =0.18 | |
Mentiss Acgv Acgvannu | =0.15.9 | |
Mentiss Acgv Acgvannu | =0.14.2 | |
Mentiss Acgv Acgvannu | =0.9.1 | |
Mentiss Acgv Acgvannu | =0.13 | |
Mentiss Acgv Acgvannu | =0.10.1 | |
Mentiss Acgv Acgvannu | =0.17.0 | |
Mentiss Acgv Acgvannu | =0.15.10 | |
Mentiss Acgv Acgvannu | =0.16.1 | |
Mentiss Acgv Acgvannu | =0.15.2 | |
Mentiss Acgv Acgvannu | =0.15.4 | |
Mentiss Acgv Acgvannu | =0.15.11 | |
Mentiss Acgv Acgvannu | =0.11 | |
Mentiss Acgv Acgvannu | =0.17.4a | |
Mentiss Acgv Acgvannu | =0.14.5 | |
Mentiss Acgv Acgvannu | =0.18.0a3 | |
Mentiss Acgv Acgvannu | =0.17.2 | |
Mentiss Acgv Acgvannu | =0.14.3 | |
Mentiss Acgv Acgvannu | =0.15.7 | |
Mentiss Acgv Acgvannu | =0.17.3 | |
Mentiss Acgv Acgvannu | =0.17.1 | |
Mentiss Acgv Acgvannu | =0.19.0a | |
Mentiss Acgv Acgvannu | =0.16 | |
Mentiss Acgv Acgvannu | =0.18.0_rc1 | |
Mentiss Acgv Acgvannu | =0.14.6 | |
Mentiss Acgv Acgvannu | =0.14.4 | |
Mentiss Acgv Acgvannu | =0.11.1 | |
Mentiss Acgv Acgvannu | =0.15.5 | |
Mentiss Acgv Acgvannu | =0.12 | |
Mentiss Acgv Acgvannu | =0.15.1 | |
Mentiss Acgv Acgvannu | =0.14.8 | |
Mentiss Acgv Acgvannu | =0.17.5 | |
Mentiss Acgv Acgvannu | =0.16.0 | |
Mentiss Acgv Acgvannu | =0.18a1 | |
Mentiss Acgv Acgvannu | =0.13.1 | |
Mentiss Acgv Acgvannu | =0.15.8 | |
Mentiss Acgv Acgvannu | =0.17.4 | |
Mentiss Acgv Acgvannu | =0.14.1 | |
Mentiss Acgv Acgvannu | =0.15.6 | |
Mentiss Acgv Acgvannu | =0.17 | |
Mentiss Acgv Acgvannu | =0.14 | |
Mentiss Acgv Acgvannu | =0.15 | |
Mentiss Acgv Acgvannu | =0.9 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2004-1731 is considered a moderate severity vulnerability due to its potential to allow email flooding.
To fix CVE-2004-1731, you should update the Mantis bugtracker to a version that includes a patch addressing this vulnerability.
CVE-2004-1731 allows remote attackers to execute denial-of-service attacks by sending excessive email messages to a single address.
CVE-2004-1731 affects multiple versions of Mantis, specifically versions prior to 0.19.0a.
A temporary workaround for CVE-2004-1731 could be to limit the ability to create multiple accounts with the same email address.