CVE-2004-2068

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2004-12-31 · updated 2026-06-16

Description

fetchnews in leafnode 1.9.47 and earlier allows remote attackers to cause a denial of service (process hang) via an empty NNTP news article with missing mandatory headers.

Affected products

Leafnode: 1.9.25, 1.9.26, 1.9.27, 1.9.28, 1.9.29, 1.9.30 (+17)

References

http://leafnode.sourceforge.net/leafnode-SA-2004-01.txt
http://secunia.com/advisories/10590
http://www.derkeiler.com/Mailing-Lists/VulnWatch/2004-01/0009.html
http://www.osvdb.org/3441
https://exchange.xforce.ibmcloud.com/vulnerabilities/14189
http://leafnode.sourceforge.net/leafnode-SA-2004-01.txt
http://secunia.com/advisories/10590
http://www.derkeiler.com/Mailing-Lists/VulnWatch/2004-01/0009.html
http://www.osvdb.org/3441
https://exchange.xforce.ibmcloud.com/vulnerabilities/14189

Get alerted when CVE-2004-2068 or the next vulnerability affects your stack