Lucene search
HistoryOct 04, 2002 - 4:00 a.m.
CVE-2002-0913
cve-2002-0913
format string vulnerability
slurp nntp client
nvd
security
information security
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.8 High
AI Score
Confidence
High
0.006 Low
EPSS
Percentile
77.8%
Format string vulnerability in log_doit function of Slurp NNTP client 1.1.0 allows a malicious news server to execute arbitrary code on the client via format strings in a server response.
Affected configurations
Node
stephen_hebditchslurpMatch1.1.0
| CPE | Name | Operator | Version |
|---|---|---|---|
| stephen_hebditch:slurp | stephen hebditch slurp | eq | 1.1.0 |
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.8 High
AI Score
Confidence
High
0.006 Low
EPSS
Percentile
77.8%
Related for CVE-2002-0913