CVE-2004-2238

CVE-2004-2238 initially described a format string vulnerability in vsybase.c within vpopmail versions 5.4.2 and earlier. However, subsequent analysis clarified that the source code utilized static format strings, effectively negating the vulnerability. Despite this, the CVE was assigned a CVSS score of 5.0 (AV:N/AC:L/Au:N/C:N/I:P/A:N), indicating potential for partial integrity impact with low attack complexity and no authentication required, though the "vulnerability" itself was later deemed non-existent. There is no known active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or KEV listing, yet it has garnered significant community discussion with 10 mentions.