CVE-2004-2460: GNU Gnubiff

Medium severity, CVSS 5.0. EPSS: 1.6% chance of exploitation in the next 30 days.

Unknown vulnerability in POP3 in gnubiff before 2.0.0 allows remote attackers to cause a denial of service (application crash) via an "infinite" Unique IDentification Listing (UIDL) list.

Affected products

• GNU Gnubiff: version 1.0.3 only; version 1.0.4 only; version 1.0.5 only; version 1.0.6 only; version 1.0.7 only; version 1.0.8 only; …

Published 2004-12-31. Last modified 2026-06-16.