CVE-2004-2460

CVE-2004-2460 affects gnubiff’s POP3 handling prior to version 2.0.0. The issue allows remote attackers to cause a denial-of-service (application crash) by sending an malformed or intentionally large/“infinite” UIDL list. The underlying root cause is not detailed in the provided documents. The en...

CVE-2004-2459

Technical details for CVE-2004-2459 are not publicly provided in the connected documents. The sources reiterate that gnubiff 1.2.0 and earlier may expose passwords. Monitor for updates.

CVE-2004-2461

The vulnerability is in gnubiff’s POP3 handling: a buffer overflow in pop3.c affects gnubiff before 2.0.0. The issue can cause a denial of service (crash) and may allow arbitrary code execution. Connected sources identify the affected component (pop3.c) and the version constraint (before 2.0.0), ...