CVE-2004-2395

Published: Dec 31, 2004Modified: Apr 16, 2026

2.1

Vector

AV:L/AC:L/Au:N/C:N/I:N/A:P

Exploitability: 3.9 / Impact: 2.9

Source: NVD

Description

Memory leak in passwd 0.68 allows local users to cause a denial of service (memory consumption) via a large number of failed read attempts from the password buffer.

Affected (11)

Products: Mandrakesoft: Mandrake Multi Network Firewall, Mandrake Linux, Mandrake Linux Corporate Server

Mandrakesoft

3 products

Mandrake Multi Network Firewall

Mandrake Linux

Mandrake Linux Corporate Server

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Mandrakesoft Mandrake Multi Network Firewall	Version 8.2

Configuration B

10 vulnerable

Vulnerable Software	Affected Versions
Mandrakesoft Mandrake Linux	Version 10.0
Mandrakesoft Mandrake Linux	Version 8.2
Mandrakesoft Mandrake Linux	Version 8.2
Mandrakesoft Mandrake Linux	Version 9.0
Mandrakesoft Mandrake Linux	Version 9.1
Mandrakesoft Mandrake Linux	Version 9.1
Mandrakesoft Mandrake Linux	Version 9.2
Mandrakesoft Mandrake Linux	Version 9.2
Mandrakesoft Mandrake Linux Corporate Server	Version 2.1
Mandrakesoft Mandrake Linux Corporate Server	Version 2.1