CVE-2004-2495: Code-Crafters Ability Mail Server

High severity, CVSS 7.8. EPSS: 2% chance of exploitation in the next 30 days.

The (1) Webmail, (2) admin, and (3) SMTP services in Ability Mail Server 1.18 allow remote attackers to cause a denial of service (CPU consumption) via a large number of simultaneous connections to the service.

Affected products

• Code-Crafters Ability Mail Server: version 1.18 only

Published 2004-12-31. Last modified 2026-06-16.