172 matches found
leafnode -- denial of service vulnerability
Matthias Andree reports: A vulnerability was found in the fetchnews program the NNTP client that may under some circumstances cause a wait for input that never arrives, fetchnews "hangs". ... As only one fetchnews program can run at a time, subsequently started fetchnews and texpire programs will...
Leafnode < 1.11.3 TCP Timeout DoS
Binary data 3011.prm...
leafnode security announcement leafnode-SA-2005-01
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 leafnode-SA-2005:01.fetchnews-crashes-on-timeout Topic: potential denial of service in leafnode Announcement: leafnode-SA-2005:01 Writer: Matthias Andree Version: 1.00 Announced: 2005-05-04 Category: main Type: potential denial of service Impact:...
CVE-2005-1453
Leafnode's CVE-2005-1453 affects fetchnews in versions 1.9.48 to 1.11.1. A remote NNTP server closing the connection while fetchnews is reading either an article header or article body can cause fetchnews to crash, which in turn prevents fetching from other servers in the configured list. This is...
CVE-2005-1453
fetchnews in leafnode 1.9.48 to 1.11.1 allows remote NNTP servers to cause a denial of service crash by closing the connection while fetchnews is reading 1 an article header or 2 an article body, which also prevents fetchnews from querying other servers...
CVE-2002-1661
The CVE-2002-1661 issue affects the Leafnode NNTP server, specifically versions 1.9.20 through 1.9.29, where processing a cross-posted article to multiple groups can trigger an infinite-loop DoS. The vulnerability occurs when one target group name is a prefix of another, and the article is reques...
CVE-2005-1453
fetchnews in leafnode 1.9.48 to 1.11.1 allows remote NNTP servers to cause a denial of service crash by closing the connection while fetchnews is reading 1 an article header or 2 an article body, which also prevents fetchnews from querying other servers...
CVE-2002-1661
The leafnode server in leafnode 1.9.20 to 1.9.29 allows remote attackers to cause a denial of service infinite loop when leafnode requests a cross-posted article to one group whose name is a prefix of another group...
CVE-2004-2068
Vulnerability summary (CVE-2004-2068) : The leafnode NNTP server’s fetchnews program (versions 1.9.47 and earlier) can be induced to hang a process by processing an empty NNTP news article with missing mandatory headers, enabling a remote DoS. Real-world references in the connected documents indi...
CVE-2005-1453
fetchnews in leafnode 1.9.48 to 1.11.1 allows remote NNTP servers to cause a denial of service crash by closing the connection while fetchnews is reading 1 an article header or 2 an article body, which also prevents fetchnews from querying other servers...
CVE-2004-2068
fetchnews in leafnode 1.9.47 and earlier allows remote attackers to cause a denial of service process hang via an empty NNTP news article with missing mandatory headers...
DEBIAN-CVE-2005-1453
fetchnews in leafnode 1.9.48 to 1.11.1 allows remote NNTP servers to cause a denial of service crash by closing the connection while fetchnews is reading 1 an article header or 2 an article body, which also prevents fetchnews from querying other servers...
CVE-2002-1661
The leafnode server in leafnode 1.9.20 to 1.9.29 allows remote attackers to cause a denial of service infinite loop when leafnode requests a cross-posted article to one group whose name is a prefix of another group...
CVE-2004-2068
fetchnews in leafnode 1.9.47 and earlier allows remote attackers to cause a denial of service process hang via an empty NNTP news article with missing mandatory headers...
CVE-2005-1453
fetchnews in leafnode 1.9.48 to 1.11.1 allows remote NNTP servers to cause a denial of service crash by closing the connection while fetchnews is reading 1 an article header or 2 an article body, which also prevents fetchnews from querying other servers...
CVE-2002-1661: Undefined Security Weakness
The leafnode server in leafnode 1.9.20 to 1.9.29 allows remote attackers to cause a denial of service infinite loop when leafnode requests a cross-posted article to one group whose name is a prefix of another group...
CVE-2005-1453: Undefined Security Weakness
fetchnews in leafnode 1.9.48 to 1.11.1 allows remote NNTP servers to cause a denial of service crash by closing the connection while fetchnews is reading 1 an article header or 2 an article body, which also prevents fetchnews from querying other servers...
CVE-2004-2068: Undefined Security Weakness
fetchnews in leafnode 1.9.47 and earlier allows remote attackers to cause a denial of service process hang via an empty NNTP news article with missing mandatory headers...