CVE-2004-2518

Gattaca Server 2003 1.1.10.0 allows remote attackers to obtain sensitive information via (1) a...

5.0 MediumPublic exploit

Gattaca Server 2003 1.1.10.0 allows remote attackers to obtain sensitive information via (1) a trailing null byte ("%00") to a URL or (2) an invalid LANGUAGE parameter to web.tmpl, which reveals the full installation path in an error message.

Exploit likelihood

4.46%Down 6.5 points since Feb 4, 2022

What each source reports

NVD Score used 5.0

Record: CVE-2004-2518
CVSS 2.0: 5.0 MediumAV:N/AC:L/Au:N/C:P/I:N/A:N
Updated: 2026-11-02

CVE List No score

Record: CVE-2004-2518
Updated: 2026-11-02

EUVDEUVD-2004-2509 No score

Record: EUVD-2004-2509
Updated: 2026-11-03

GitHub AdvisoriesGHSA-4rg9-9m3h-2wgj No score

Gattaca Server 2003 1.1.10.0 allows remote attackers to obtain sensitive information via (1) a...

Record: GHSA-4rg9-9m3h-2wgj
Updated: 2026-11-02

Affected products

geeos team gattaca server 2003

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
Exploit-DB	Gattaca Server 2003 - Null Byte Full Path Disclosure	2004-07-15
Exploit-DB	Gattaca Server 2003 - 'Language' Path Exposure	2004-07-15

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, Exploit-DB, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2004-2518 is a medium vulnerability (CVSS 5.0) in Geeos Team Gattaca Server 2003, published December 31, 2004. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 4.46%, the 91st percentile. No source names a fixed version.

References

Show 6 moreShow less