CVE-2005-2904

Zebedee 2.4.1 is affected. If the allowed redirection port is not set, a remote attacker can trigger a denial-of-service (application crash) by sending a zero port number in the protocol option header, causing an assert in makeConnection (zebedee.c). This is a Denial of Service vulnerability with...