CVE-2004-2521

CVE-2004-2521 affects Gattaca Server 2003 (version 1.1.10.0). The vulnerability allows a remote attacker to cause a denial-of-service (application crash) by opening a large number of connections to SMTP (port 25) or POP (port 110). The issue is documented across multiple sources (NVD, CVE list, E...

CVE-2004-2518

CVE-2004-2518 affects Gattaca Server 2003 (version 1.1.10.0). The issue is an information disclosure: remote attackers can cause an error message to reveal the full installation path by supplying (1) a trailing null byte (%00) in a URL or (2) an invalid LANGUAGE parameter to web.tmpl. The connect...

CVE-2004-2519

The CVE-2004-2519 entry concerns Gattaca Server 2003 version 1.1.10.0. The vulnerability is a denial-of-service condition caused by how the LANGUAGE parameter handles directory specifiers in index.tmpl and web.tmpl. Examples include using: /, , ., .., and lang//en, which can lead to CPU consumpti...

CVE-2004-2522

CVE-2004-2522 describes a cross-site scripting (XSS) vulnerability in the Gattaca Server 2003, version 1.1.10.0, within the web.tmpl component. The issue allows remote attackers to inject arbitrary web script or HTML by supplying manipulated values to either the template or language parameters. T...