Every CVESearch/Get API key

CVE-2004-2378

@Mail 3.64 for Windows allows remote attackers to cause a denial of service ("unusable" server)...

5.0 Medium

CVE-2004-2378 is a medium vulnerability (CVSS 5.0) in Calacode At Mail Webmail System, published December 31, 2004. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.87%, the 79th percentile. No source names a fixed version.

What does this mean?
Severity
5.0 MediumCVSS 2.0, NVD
Exploit chance
1.87%EPSS, 79th percentile
Exploitation
None knownNot on CISA’s or ENISA’s lists
Fixed in
No fix listedNo source names one

Description

@Mail 3.64 for Windows allows remote attackers to cause a denial of service ("unusable" server) via a large number of POP3 connections to the server.

Exploit likelihood

1.87%Up 0.5 points since Feb 4, 2022
90%50%10%1%

Affected products

What each source reports

NVD Score used5.0

@Mail 3.64 for Windows allows remote attackers to cause a denial of service ("unusable" server) via a large number of POP3 connections to the server.

Record
CVE-2004-2378
CVSS 2.0
5.0 MediumAV:N/AC:L/Au:N/C:N/I:N/A:P
Updated
2026-11-02
CVE ListNo score

@Mail 3.64 for Windows allows remote attackers to cause a denial of service ("unusable" server) via a large number of POP3 connections to the server.

Record
CVE-2004-2378
Updated
2026-11-02
EUVDEUVD-2004-2370No score

@Mail 3.64 for Windows allows remote attackers to cause a denial of service ("unusable" server) via a large number of POP3 connections to the server.

Record
EUVD-2004-2370
Updated
2026-11-03
GitHub AdvisoriesGHSA-wfgm-h537-wfqrNo score

@Mail 3.64 for Windows allows remote attackers to cause a denial of service ("unusable" server)...

@Mail 3.64 for Windows allows remote attackers to cause a denial of service ("unusable" server) via a large number of POP3 connections to the server.

Record
GHSA-wfgm-h537-wfqr
Updated
2026-11-02

History

History
RecordedChangedSources
facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

MoveEnter Open