The (1) lost password and (2) account pending features in GForge 4.5 do not properly set a limit on the number of e-mails sent to an e-mail address, which allows remote attackers to send a large number of messages to arbitrary e-mail addresses (aka mail bomb).
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2005-08-03T04:00:00

Updated: 2024-08-07T22:29:59.622Z

Reserved: 2005-08-03T00:00:00

Link: CVE-2005-2431

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2005-08-03T04:00:00.000

Modified: 2024-11-20T23:59:32.513

Link: CVE-2005-2431

cve-icon Redhat

No data.