The (1) lost password and (2) account pending features in GForge 4.5 do not properly set a limit on the number of e-mails sent to an e-mail address, which allows remote attackers to send a large number of messages to arbitrary e-mail addresses (aka mail bomb).
Metrics
Affected Vendors & Products
References
Link | Providers |
---|---|
http://marc.info/?l=bugtraq&m=112259845904350&w=2 |
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2005-08-03T04:00:00
Updated: 2024-08-07T22:29:59.622Z
Reserved: 2005-08-03T00:00:00
Link: CVE-2005-2431
Vulnrichment
No data.
NVD
Status : Modified
Published: 2005-08-03T04:00:00.000
Modified: 2024-11-20T23:59:32.513
Link: CVE-2005-2431
Redhat
No data.