CVE-2004-2662 Denial of service in n/a

Medium 5.0 Published 17 Aug 2006 Updated 8 Aug 2024

Remote attackers can cause a denial of service in 04WebServer by sending specific data that triggers resource leaks and thread termination.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: None listed

What is CVE-2004-2662?

CVE-2004-2662 is a medium-severity denial of service vulnerability in n/a, published on 17 Aug 2006. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

Soft3304 04WebServer before 1.41 allows remote attackers to cause a denial of service (resource consumption or crash) via certain data related to OpenSSL, which causes a thread to terminate but continue to hold resources.

Which versions are affected by CVE-2004-2662?

It affects 1 product.

Products include Soft3304 04webserver.

How do I fix CVE-2004-2662?

No fix has been published for CVE-2004-2662 yet. Limit exposure of the affected software until one is available.

Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.

Is CVE-2004-2662 being exploited?

There is no known exploitation of CVE-2004-2662 in the wild and no public exploit code.

Sources

Also known as GHSA-cp69-hrg6-gmgh.