Vulnerability Details CVE-2004-2068
fetchnews in leafnode 1.9.47 and earlier allows remote attackers to cause a denial of service (process hang) via an empty NNTP news article with missing mandatory headers.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.009
EPSS Ranking 74.9%
CVSS Severity
CVSS v2 Score 5.0
References
- http://leafnode.sourceforge.net/leafnode-SA-2004-01.txt
- http://secunia.com/advisories/10590
- http://www.derkeiler.com/Mailing-Lists/VulnWatch/2004-01/0009.html
- http://www.osvdb.org/3441
- https://exchange.xforce.ibmcloud.com/vulnerabilities/14189
- http://leafnode.sourceforge.net/leafnode-SA-2004-01.txt
- http://secunia.com/advisories/10590
- http://www.derkeiler.com/Mailing-Lists/VulnWatch/2004-01/0009.html
- http://www.osvdb.org/3441
- https://exchange.xforce.ibmcloud.com/vulnerabilities/14189
Products affected by CVE-2004-2068
-
cpe:2.3:a:leafnode:leafnode:1.9.25
-
cpe:2.3:a:leafnode:leafnode:1.9.26
-
cpe:2.3:a:leafnode:leafnode:1.9.27
-
cpe:2.3:a:leafnode:leafnode:1.9.28
-
cpe:2.3:a:leafnode:leafnode:1.9.29
-
cpe:2.3:a:leafnode:leafnode:1.9.30
-
cpe:2.3:a:leafnode:leafnode:1.9.31
-
cpe:2.3:a:leafnode:leafnode:1.9.32
-
cpe:2.3:a:leafnode:leafnode:1.9.33
-
cpe:2.3:a:leafnode:leafnode:1.9.34
-
cpe:2.3:a:leafnode:leafnode:1.9.35
-
cpe:2.3:a:leafnode:leafnode:1.9.36
-
cpe:2.3:a:leafnode:leafnode:1.9.37
-
cpe:2.3:a:leafnode:leafnode:1.9.38
-
cpe:2.3:a:leafnode:leafnode:1.9.39
-
cpe:2.3:a:leafnode:leafnode:1.9.40
-
cpe:2.3:a:leafnode:leafnode:1.9.41
-
cpe:2.3:a:leafnode:leafnode:1.9.42
-
cpe:2.3:a:leafnode:leafnode:1.9.43
-
cpe:2.3:a:leafnode:leafnode:1.9.44
-
cpe:2.3:a:leafnode:leafnode:1.9.45
-
cpe:2.3:a:leafnode:leafnode:1.9.46
-
cpe:2.3:a:leafnode:leafnode:1.9.47