CVE-2004-2392

MediumCVSS 5.0/10Last modified Jun 16, 2026

Description

libuser 0.51.7 allows attackers to cause a denial of service (crash or disk consumption) via unknown attack vectors, related to read failures and other bugs.

Metrics

CVSS 2.0 5.0/10AV:N/AC:L/Au:N/C:N/I:N/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://securitytracker.com/id?1010187
http://www.mandriva.com/security/advisories?name=MDKSA-2004:044Patch, Vendor Advisory
http://www.redhat.com/support/errata/RHSA-2005-770.htmlVendor Advisory
http://www.securityfocus.com/bid/10368Patch
https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=120168Patch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/16188
http://securitytracker.com/id?1010187
http://www.mandriva.com/security/advisories?name=MDKSA-2004:044Patch, Vendor Advisory
http://www.redhat.com/support/errata/RHSA-2005-770.htmlVendor Advisory
http://www.securityfocus.com/bid/10368Patch
https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=120168Patch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/16188

Timeline

Published: Dec 31, 2004
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2004

CVE-2004-23937.5Java Secure Socket Extension (JSSE) 1.0.3 through 1.0.3_2 does not properly validate the certificate chain of a client or server, which allo CVE-2004-23942.1Off-by-one error in passwd 0.68 and earlier, when using the --stdin option, causes passwd to use the first 78 characters of a password inste CVE-2004-23952.1Memory leak in passwd 0.68 allows local users to cause a denial of service (memory consumption) via a large number of failed read attempts f CVE-2004-23967.2passwd 0.68 does not check the return code for the pam_start function, which has unknown impact and attack vectors that may prevent "safe an CVE-2004-23977.5The web-based Management Console in Blue Coat Security Gateway OS 3.0 through 3.1.3.13 and 3.2.1, when importing a private key, stores the k CVE-2004-23982.1Netenberg Fantastico De Luxe 2.8 uses database file names that contain the associated usernames, which allows local users to determine valid CVE-2004-23995.0Secure Computing Corporation Sidewinder G2 6.1.0.01 allows remote attackers to cause a denial of service (CPU consumption) via delayed respo CVE-2004-24002.1WinFTP Server 1.6 stores username and password credentials in plaintext in the data\user.wfd file, which allows local users to gain access t CVE-2004-24017.5Stack-based buffer overflow in Ipswitch IMail Express Web Messaging before 8.05 might allow remote attackers to execute arbitrary code via a CVE-2004-24024.3Cross-site scripting (XSS) vulnerability in YaBB.pl in YaBB 1 GOLD SP 1.3.2 allows remote attackers to inject arbitrary web script or HTML v CVE-2004-240310.0Cross-site request forgery (CSRF) vulnerability in YaBB 1 GOLD SP 1.3.2 allows remote attackers to perform unauthorized actions as the admin CVE-2004-24056.4Buffer overflow in multiple F-Secure Anti-Virus products, including F-Secure Anti-Virus 5.42 and earlier, allows remote attackers to bypass