CVE-2004-2423 Denial of service in n/a

What is CVE-2004-2423?

CVE-2004-2423 is a medium-severity denial of service vulnerability in n/a, published on 18 Aug 2005. It can be exploited over the network, with no action from the victim.

Official description

Unknown vulnerability in the Web calendaring component of Ipswitch IMail Server before 8.13 allows remote attackers to cause a denial of service (crash) via "specific content."

Which versions are affected by CVE-2004-2423?

It affects 1 product.

Products include Ipswitch Imail.

How do I fix CVE-2004-2423?

No fix has been published for CVE-2004-2423 yet. Limit exposure of the affected software until one is available.

Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.

Is CVE-2004-2423 being exploited?

There is no known exploitation of CVE-2004-2423 in the wild and no public exploit code.

Other vulnerabilities in n/a

• CVE-2005-1255 Memory corruption in n/a Critical 10.0
• CVE-2005-1256 Memory corruption in n/a Critical 10.0
• CVE-2004-0297 Memory corruption in n/a Critical 10.0
• CVE-2002-0777 Memory corruption in n/a Critical 10.0
• CVE-1999-1046 Memory corruption in n/a Critical 10.0

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-wcrj-v389-rq28.