MiniShare 1.3.2 allows remote attackers to cause a denial of service (crash) via a malformed HTTP GET or HEAD request without the proper nu…

1. 2004-05-26 First public exploit (EDB-24144)
2. 2004-05-26 Published

3.84% chance of exploitation in the next 30 days, higher than 90% of all scored CVEs (FIRST EPSS, 2026-11-08).

• EDB-24144 MiniShare 1.3.2 - Remote Denial of Service dos, 2004-05-26
• securityfocus.com http://www.securityfocus.com/bid/10417 referenced PoC, tagged "exploit" by a source, unverified
• secunia.com http://secunia.com/advisories/11715 referenced PoC, tagged "exploit" by a source, unverified
• osvdb.org http://www.osvdb.org/6432 referenced PoC, tagged "exploit" by a source, unverified
• autistici.org http://www.autistici.org/fdonato/advisory/MiniShare1.3.2-adv.txt referenced PoC, tagged "exploit" by a source, unverified

• securityfocus.com /bid/10417

  vdb-entry, exploit, patch, vendor-advisory

• secunia.com /advisories/11715

  third-party-advisory, exploit, patch, vendor-advisory

• sourceforge.net /project/shownotes.php?release_id=241158

  patch, vendor-advisory

• osvdb.org /6432

  vdb-entry, exploit, patch, vendor-advisory

• autistici.org /fdonato/advisory/MiniShare1.3.2-adv.txt

  exploit, vendor-advisory

• marc.info /?l=bugtraq&m=108563992129877&w=2

  mailing-list

• lists.netsys.com /pipermail/full-disclosure/2004-May/021980.html

  mailing-list

• exchange.xforce.ibmcloud.com /vulnerabilities/16260

  vdb-entry

• CVE List CVE-2004-2035
• NVD CVE-2004-2035

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.