GNU Gnubiff vulnerabilities

3 CVEs affecting GNU Gnubiff, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2004-2461, published 2004-12-31.

More from GNU.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2004-2461, published 2004-12-31. High severity, CVSS 7.5. EPSS: 2.5% chance of exploitation in the next 30 days. Buffer overflow in pop3.c in gnubiff before 2.0.0 allows attackers to cause a denial of service (crash) and possibly execute arbitrary code.
• CVE-2004-2460, published 2004-12-31. Medium severity, CVSS 5.0. EPSS: 1.6% chance of exploitation in the next 30 days. Unknown vulnerability in POP3 in gnubiff before 2.0.0 allows remote attackers to cause a denial of service (application crash) via an "infinite" Unique IDentification Listing (UIDL) list.
• CVE-2004-2459, published 2004-12-31. Low severity, CVSS 2.1. EPSS: 0.6% chance of exploitation in the next 30 days. Unknown vulnerability in gnubiff 1.2.0 and earlier allows local users to obtain passwords, related to the password table.