CVE-2004-2392 Denial of service in n/a

What is CVE-2004-2392?

CVE-2004-2392 is a medium-severity denial of service vulnerability in Mandrakesoft Mandrake Linux, published on 17 Aug 2005.

Official description

libuser 0.51.7 allows attackers to cause a denial of service (crash or disk consumption) via unknown attack vectors, related to read failures and other bugs.

Which versions are affected by CVE-2004-2392?

It affects 2 products.

Products include Mandrakesoft Mandrake Linux, Mandrakesoft Mandrake Linux Corporate Server.

How do I fix CVE-2004-2392?

No fix has been published for CVE-2004-2392 yet. Limit exposure of the affected software until one is available.

Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.

Is CVE-2004-2392 being exploited?

There is no known exploitation of CVE-2004-2392 in the wild and no public exploit code.

Other vulnerabilities in Mandrakesoft Mandrake Linux

• CVE-2004-1187 Memory corruption in n/a Critical 10.0
• CVE-2004-1188 Memory corruption in n/a Critical 10.0
• CVE-2003-0041 Command injection in n/a Critical 10.0
• CVE-2000-1042 Memory corruption in n/a Critical 10.0
• CVE-2000-1043 Memory corruption in n/a Critical 10.0

All Mandrakesoft Mandrake Linux vulnerabilities

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-gcfp-8ccc-4pp3.