CVE-2004-1918

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2004-04-09 · updated 2026-06-16

Description

RSniff 1.0 allows remote attackers to cause a denial of service (connection exhaustion) via a large number of connections with a command other than AUTHENTICATE, or without any data, which prevents the socket from being closed properly.

Affected products

Rsniff: 1.0

References

http://aluigi.altervista.org/adv/rsniff-adv.txt
http://marc.info/?l=bugtraq&m=108152508004665&w=2
http://secunia.com/advisories/11339
http://www.securityfocus.com/bid/10093
https://exchange.xforce.ibmcloud.com/vulnerabilities/15823
http://aluigi.altervista.org/adv/rsniff-adv.txt
http://marc.info/?l=bugtraq&m=108152508004665&w=2
http://secunia.com/advisories/11339
http://www.securityfocus.com/bid/10093
https://exchange.xforce.ibmcloud.com/vulnerabilities/15823

Get alerted when CVE-2004-1918 or the next vulnerability affects your stack