Lucene search

[email protected]CVE-2004-2390

HistoryDec 31, 2004 - 5:00 a.m.

CVE-2004-2390

2004-12-3105:00:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve-2004-2390

denial of service

jabber gadu-gadu transport

security vulnerability

nvd

cve

7.2 High

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.004 Low

EPSS

Percentile

71.6%

JSON

The roster import functionality in Jabber Gadu-Gadu Transport (a.k.a. jabber-gg-transport) 2.0.x before 2.0.8, when using libgadu 1.0 and later, allows attackers to cause a denial of service via unknown vectors.

CPENameOperatorVersion
jabberstudio:jabber_gadu-gadu_transportjabberstudio jabber gadu-gadu transporteq2.0
jabberstudio:jabber_gadu-gadu_transportjabberstudio jabber gadu-gadu transporteq2.0.3
jabberstudio:jabber_gadu-gadu_transportjabberstudio jabber gadu-gadu transporteq2.0.5
jabberstudio:jabber_gadu-gadu_transportjabberstudio jabber gadu-gadu transporteq2.0.6
jabberstudio:jabber_gadu-gadu_transportjabberstudio jabber gadu-gadu transporteq2.0.4
jabberstudio:jabber_gadu-gadu_transportjabberstudio jabber gadu-gadu transporteq2.0.2
jabberstudio:jabber_gadu-gadu_transportjabberstudio jabber gadu-gadu transporteq2.0.1
jabberstudio:jabber_gadu-gadu_transportjabberstudio jabber gadu-gadu transporteq2.0.7

CPE	Name	Operator	Version
jabberstudio:jabber_gadu-gadu_transport	jabberstudio jabber gadu-gadu transport	eq	2.0
jabberstudio:jabber_gadu-gadu_transport	jabberstudio jabber gadu-gadu transport	eq	2.0.3
jabberstudio:jabber_gadu-gadu_transport	jabberstudio jabber gadu-gadu transport	eq	2.0.5
jabberstudio:jabber_gadu-gadu_transport	jabberstudio jabber gadu-gadu transport	eq	2.0.6
jabberstudio:jabber_gadu-gadu_transport	jabberstudio jabber gadu-gadu transport	eq	2.0.4
jabberstudio:jabber_gadu-gadu_transport	jabberstudio jabber gadu-gadu transport	eq	2.0.2
jabberstudio:jabber_gadu-gadu_transport	jabberstudio jabber gadu-gadu transport	eq	2.0.1
jabberstudio:jabber_gadu-gadu_transport	jabberstudio jabber gadu-gadu transport	eq	2.0.7

References

secunia.com/advisories/10974/

www.jabberstudio.org/projects/jabber-gg-transport/releases/view.php?id=429

www.securityfocus.com/bid/9710

exchange.xforce.ibmcloud.com/vulnerabilities/15319

7.2 High

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.004 Low

EPSS

Percentile

71.6%

JSON