First published: Fri Dec 31 2004(Updated: )
Unknown vulnerability in POP3 in gnubiff before 2.0.0 allows remote attackers to cause a denial of service (application crash) via an "infinite" Unique IDentification Listing (UIDL) list.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Gnu Gnubiff | =1.2.0 | |
Gnu Gnubiff | =1.0.6 | |
Gnu Gnubiff | =1.0.7 | |
Gnu Gnubiff | =1.0.5 | |
Gnu Gnubiff | =1.0.3 | |
Gnu Gnubiff | =1.4.0 | |
Gnu Gnubiff | =1.0.10 | |
Gnu Gnubiff | =1.0.9 | |
Gnu Gnubiff | =1.0.8 | |
Gnu Gnubiff | =1.0.4 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The severity of CVE-2004-2460 is categorized as a denial of service vulnerability due to application crashes.
To fix CVE-2004-2460, upgrade to gnubiff version 2.0.0 or later where the vulnerability has been addressed.
CVE-2004-2460 affects gnubiff versions 1.0.3 through 1.4.0, including various earlier versions.
Yes, CVE-2004-2460 can be exploited remotely to cause a denial of service condition.
The impact of CVE-2004-2460 on systems using gnubiff is an application crash leading to service unavailability.