CVE-2004-2460
published 2004-12-31CVE-2004-2460: Unknown vulnerability in POP3 in gnubiff before 2.0.0 allows remote attackers to cause a denial of service (application crash) via an "infinite" Unique…
PriorityP411medium5CVSS 2.0
AVNACLAuNCNINAP
EPSS
1.63%
73.5th percentile
Unknown vulnerability in POP3 in gnubiff before 2.0.0 allows remote attackers to cause a denial of service (application crash) via an "infinite" Unique IDentification Listing (UIDL) list.
Affected
15 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | gnubiff | < gnubiff 2.0.0 (bookworm) | gnubiff 2.0.0 (bookworm) |
| gnu | gnubiff | — | — |
| gnu | gnubiff | — | — |
| gnu | gnubiff | — | — |
| gnu | gnubiff | — | — |
| gnu | gnubiff | — | — |
| gnu | gnubiff | — | — |
| gnu | gnubiff | — | — |
| gnu | gnubiff | — | — |
| gnu | gnubiff | — | — |
| gnu | gnubiff | — | — |
| gnu | gnubiff | >= 0 < 2.0.0 | 2.0.0 |
| gnu | gnubiff | >= 0 < 2.0.0 | 2.0.0 |
| gnu | gnubiff | >= 0 < 2.0.0 | 2.0.0 |
| gnu | gnubiff | >= 0 < 2.0.0 | 2.0.0 |
CVSS provenance
nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P
osv5.0MEDIUM
vendor_debian5.0MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Debian
CVE-2004-2460: gnubiff - Unknown vulnerability in POP3 in gnubiff before 2.0.0 allows remote attackers to...
vendor_debian·2004·CVSS 5.0
CVE-2004-2460 [MEDIUM] CVE-2004-2460: gnubiff - Unknown vulnerability in POP3 in gnubiff before 2.0.0 allows remote attackers to...
Unknown vulnerability in POP3 in gnubiff before 2.0.0 allows remote attackers to cause a denial of service (application crash) via an "infinite" Unique IDentification Listing (UIDL) list.
Scope: local
bookworm: resolved (fixed in 2.0.0)
bullseye: resolved (fixed in 2.0.0)
forky: resolved (fixed in 2.0.0)
sid: resolved (fixed in 2.0.0)
trixie: resolved (fixed in 2.0.0)
GHSA
GHSA-jc3q-h6j6-c49r: Unknown vulnerability in POP3 in gnubiff before 2
ghsa_unreviewed·2022-04-29
CVE-2004-2460 [MEDIUM] GHSA-jc3q-h6j6-c49r: Unknown vulnerability in POP3 in gnubiff before 2
Unknown vulnerability in POP3 in gnubiff before 2.0.0 allows remote attackers to cause a denial of service (application crash) via an "infinite" Unique IDentification Listing (UIDL) list.
OSV
CVE-2004-2460: Unknown vulnerability in POP3 in gnubiff before 2
osv·2004-12-31·CVSS 5.0
CVE-2004-2460 [MEDIUM] CVE-2004-2460: Unknown vulnerability in POP3 in gnubiff before 2
Unknown vulnerability in POP3 in gnubiff before 2.0.0 allows remote attackers to cause a denial of service (application crash) via an "infinite" Unique IDentification Listing (UIDL) list.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://gnubiff.sourceforge.net/changelog.phphttp://secunia.com/advisories/12445http://www.osvdb.org/9731http://www.securityfocus.com/bid/11123https://exchange.xforce.ibmcloud.com/vulnerabilities/17282http://gnubiff.sourceforge.net/changelog.phphttp://secunia.com/advisories/12445http://www.osvdb.org/9731http://www.securityfocus.com/bid/11123https://exchange.xforce.ibmcloud.com/vulnerabilities/17282
2004-12-31
Published