CVE-2004-2356 Null dereference in n/a
Remote attackers can crash Fizmez Web Server by connecting and disconnecting without sending data, causing a null pointer dereference.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2004-2356?
CVE-2004-2356 is a medium-severity vulnerability in n/a, published on 16 Aug 2005. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Early termination vulnerability in Fizmez Web Server 1.0 allows remote attackers to cause a denial of service (crash) by connecting to the server and then disconnecting without sending any data, which triggers a null pointer dereference.
Which versions are affected by CVE-2004-2356?
It affects 1 product.
Products include Fizmez Fizmez Web Server.
How do I fix CVE-2004-2356?
No fix has been published for CVE-2004-2356 yet. Limit exposure of the affected software until one is available.
Is CVE-2004-2356 being exploited?
There is no known exploitation of CVE-2004-2356 in the wild and no public exploit code.
Sources
Also known as GHSA-gh55-8xp3-37g8.