CVE-2004-2519

Gattaca Server 2003 1.1.10.0 allows remote attackers to cause a denial of service (CPU consumption) via directory specifiers in the LANGUAGE parameter to (1) index.tmpl and (2) web.tmpl, such as (a) slash "/", (b) backslash "\", (c) dot ".",, (d) dot dot "..", and (e) internal slash "lang//en".

• http://members.lycos.co.uk/r34ct/main/Gattaca%20Server%202003.txtExploit, Vendor Advisory
• http://secunia.com/advisories/12071Exploit, Vendor Advisory
• http://securitytracker.com/id?1010703Exploit
• http://www.gattaca-server.com/cgi-bin/yabb/YaBB.pl?board=gattaca_discussion%3Baction=display%3Bnum=1091194176%3Bstart=0#0
• http://www.osvdb.org/7923Exploit
• http://www.securityfocus.com/bid/10728Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/16700
• http://members.lycos.co.uk/r34ct/main/Gattaca%20Server%202003.txtExploit, Vendor Advisory
• http://secunia.com/advisories/12071Exploit, Vendor Advisory
• http://securitytracker.com/id?1010703Exploit
• http://www.gattaca-server.com/cgi-bin/yabb/YaBB.pl?board=gattaca_discussion%3Baction=display%3Bnum=1091194176%3Bstart=0#0
• http://www.osvdb.org/7923Exploit
• http://www.securityfocus.com/bid/10728Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/16700

Published

Dec 31, 2004

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2004-2513Buffer overflow in the IMAP service of Mercury (Pegasus) Mai…
• CVE-2004-2514Cross-site scripting (XSS) vulnerability in modules/private_…
• CVE-2004-2515Format string vulnerability in VMware Workstation 4.5.2 buil…
• CVE-2004-2516Directory traversal vulnerability in myServer 0.7 allows rem…
• CVE-2004-2517myServer 0.7.1 allows remote attackers to cause a denial of …
• CVE-2004-2518Gattaca Server 2003 1.1.10.0 allows remote attackers to obta…
• CVE-2004-2520POP3 protocol in Gattaca Server 2003 1.1.10.0 allows remote …
• CVE-2004-2521Mail server in Gattaca Server 2003 1.1.10.0 allows remote at…
• CVE-2004-2522Cross-site scripting (XSS) vulnerability in web.tmpl in Gatt…
• CVE-2004-2523Format string vulnerability in the msg command (cat_message …
• CVE-2004-2524clogin.php in Benchmark Designs' WHM AutoPilot 2.4.5 and ear…
• CVE-2004-2525Cross-site scripting (XSS) vulnerability in compat.php in Se…