CVE-2005-2904

CVE-2005-2904 describes a denial-of-service vulnerability in Zebedee 2.4.1, affecting instances where the "allowed redirection port" is not configured. An unauthenticated remote attacker can exploit this by sending a crafted protocol option header with a zero in the port number, leading to an application crash due to an assert error in the makeConnection function. This vulnerability has a CVSS score of 5.0, indicating a medium severity with low attack complexity and no confidentiality or integrity impact, but a partial availability impact. While not listed in CISA's KEV catalog, an exploit is publicly available on ExploitDB, though there is no evidence of active exploitation, Metasploit modules, or significant community discussion or media coverage.