CVE-2004-1644

MediumCVSS 5.0/10Last modified Jun 16, 2026

Description

Xedus 1.0 allows remote attackers to cause a denial of service (refuse connections) by connecting multiple times from the same IP address.

Metrics

CVSS 2.0 5.0/10AV:N/AC:L/Au:N/C:N/I:N/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://marc.info/?l=bugtraq&m=109394018411394&w=2
http://secunia.com/advisories/12418Vendor Advisory
http://www.gulftech.org/?node=research&article_id=00047-08302004Vendor Advisory
http://www.securityfocus.com/bid/11071Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/17165
http://marc.info/?l=bugtraq&m=109394018411394&w=2
http://secunia.com/advisories/12418Vendor Advisory
http://www.gulftech.org/?node=research&article_id=00047-08302004Vendor Advisory
http://www.securityfocus.com/bid/11071Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/17165

Timeline

Published: Aug 30, 2004
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2004

CVE-2004-16454.3Cross-site scripting (XSS) vulnerability in Xedus 1.0 allows remote attackers to execute arbitrary web script or HTML via the (1) username p CVE-2004-16465.0Directory traversal vulnerability in Xedus 1.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the URL.CVE-2004-16477.5SQL injection vulnerability in Password Protect allows remote attackers to execute arbitrary SQL statements and bypass authentication via (1 CVE-2004-16484.3Cross-site scripting (XSS) vulnerability in (1) index.asp, (2) ChangePassword.asp, (3) users_list.asp, (4) and users_add.asp in Password Pro CVE-2004-16497.2Buffer overflow in Microsoft Msinfo32.exe might allow local users to execute arbitrary code via a long filename in the msinfo_file command l CVE-2004-16507.5D-Link DCS-900 Internet Camera listens on UDP port 62976 for an IP address, which allows remote attackers to change the IP address of the ca CVE-2004-16514.3Multiple cross-site scripting (XSS) vulnerabilities in the registration page in phpScheduleIt 1.0.0 RC1 allow remote attackers to inject arb CVE-2004-16527.5phpScheduleIt 1.0.0 RC1 does not clear administrative privileges if the administrator logs in as a normal user, which allows users with phys CVE-2004-16536.4The default configuration for OpenSSH enables AllowTcpForwarding, which could allow remote authenticated users to perform a port bounce, whe CVE-2004-16547.5SQL injection vulnerability in the calendar module in phpWebsite 0.9.3-4 and earlier allows remote attackers to execute arbitrary SQL comman CVE-2004-16554.3Cross-site scripting (XSS) vulnerability in phpWebsite 0.9.3-4 and earlier allows remote attackers to inject arbitrary web script or HTML vi CVE-2004-16565.0CRLF injection vulnerability in Comersus Shopping Cart 5.0991 allows remote attackers to perform HTTP Response Splitting attacks to modify e