CVE-2004-2650

medium

Description

Spooler in Apache Foundation James 2.2.0 allows local users to cause a denial of service (memory consumption) by triggering various error conditions in the retrieve function, which prevents a lock from being released and causes a memory leak.

References

http://www.securityfocus.com/bid/15765

http://james.apache.org/changelog.html

http://issues.apache.org/jira/browse/JAMES-268

Details

Source: Mitre, NVD

Published: 2004-12-31

Updated: 2008-09-05

Risk Information

CVSS v2

Base Score: 4.9

Vector: CVSS2#AV:L/AC:L/Au:N/C:N/I:N/A:C

Severity: Medium

CVSS v3

Base Score: 5.5

Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H