CVE-2004-2650: Apache James

Medium severity, CVSS 4.9. EPSS: 0.6% chance of exploitation in the next 30 days.

Spooler in Apache Foundation James 2.2.0 allows local users to cause a denial of service (memory consumption) by triggering various error conditions in the retrieve function, which prevents a lock from being released and causes a memory leak.

Affected products

• Apache James: version 2.2.0 only

Published 2004-12-31. Last modified 2026-06-16.