leafnode security announcement leafnode-SA-2005-01

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 leafnode-SA-2005:01.fetchnews-crashes-on-timeout Topic: potential denial of service in leafnode Announcement: leafnode-SA-2005:01 Writer: Matthias Andree Version: 1.00 Announced: 2005-05-04 Category: main Type: potential denial of service Impact:...

CVE-2004-2068

Vulnerability summary (CVE-2004-2068) : The leafnode NNTP server’s fetchnews program (versions 1.9.47 and earlier) can be induced to hang a process by processing an empty NNTP news article with missing mandatory headers, enabling a remote DoS. Real-world references in the connected documents indi...

CVE-2005-1453

Leafnode's CVE-2005-1453 affects fetchnews in versions 1.9.48 to 1.11.1. A remote NNTP server closing the connection while fetchnews is reading either an article header or article body can cause fetchnews to crash, which in turn prevents fetching from other servers in the configured list. This is...

CVE-2005-1453

fetchnews in leafnode 1.9.48 to 1.11.1 allows remote NNTP servers to cause a denial of service crash by closing the connection while fetchnews is reading 1 an article header or 2 an article body, which also prevents fetchnews from querying other servers...

CVE-2004-2068

fetchnews in leafnode 1.9.47 and earlier allows remote attackers to cause a denial of service process hang via an empty NNTP news article with missing mandatory headers...

CVE-2002-1661

The CVE-2002-1661 issue affects the Leafnode NNTP server, specifically versions 1.9.20 through 1.9.29, where processing a cross-posted article to multiple groups can trigger an infinite-loop DoS. The vulnerability occurs when one target group name is a prefix of another, and the article is reques...

CVE-2005-1453

fetchnews in leafnode 1.9.48 to 1.11.1 allows remote NNTP servers to cause a denial of service crash by closing the connection while fetchnews is reading 1 an article header or 2 an article body, which also prevents fetchnews from querying other servers...

CVE-2002-1661

The leafnode server in leafnode 1.9.20 to 1.9.29 allows remote attackers to cause a denial of service infinite loop when leafnode requests a cross-posted article to one group whose name is a prefix of another group...

CVE-2004-2068

fetchnews in leafnode 1.9.47 and earlier allows remote attackers to cause a denial of service process hang via an empty NNTP news article with missing mandatory headers...

CVE-2005-1453

fetchnews in leafnode 1.9.48 to 1.11.1 allows remote NNTP servers to cause a denial of service crash by closing the connection while fetchnews is reading 1 an article header or 2 an article body, which also prevents fetchnews from querying other servers...

CVE-2005-1453

fetchnews in leafnode 1.9.48 to 1.11.1 allows remote NNTP servers to cause a denial of service crash by closing the connection while fetchnews is reading 1 an article header or 2 an article body, which also prevents fetchnews from querying other servers...

DEBIAN-CVE-2005-1453

fetchnews in leafnode 1.9.48 to 1.11.1 allows remote NNTP servers to cause a denial of service crash by closing the connection while fetchnews is reading 1 an article header or 2 an article body, which also prevents fetchnews from querying other servers...

CVE-2002-1661

The leafnode server in leafnode 1.9.20 to 1.9.29 allows remote attackers to cause a denial of service infinite loop when leafnode requests a cross-posted article to one group whose name is a prefix of another group...

Leafnode < 1.11.2 Abrupt Disconnect DoS

Binary data 2880.prm...

LeafNode < 1.9.30 Resource Exhaustion DoS

Binary data 1887.prm...

Mandrake Linux Security Advisory : leafnode (MDKSA-2003:005)

A vulnerability was discovered by Jan Knutar in leafnode that Mark Brown pointed out could be used in a Denial of Service attack. This vulnerability causes leafnode to go into an infinite loop with 100% CPU use when an article that has been crossposed to several groups, one of which is the prefix...

FreeBSD : leafnode fetchnews denial-of-service triggered by truncated transmission (88)

The following package needs to be updated: leafnode %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated by freebsdpkga051a4ec3aa14dd19bdca61eb5700153.nasl. Disabled on 2011/10/02. C Tenable Network Security, Inc. This script contains information extracted from VuXML : Copyright...

DEBIAN-CVE-2003-0744

The fetchnews NNTP client in leafnode 1.9.3 to 1.9.41 allows remote attackers to cause a denial of service process hang and termination via certain malformed Usenet news articles that cause fetchnews to hang while waiting for input...

CVE-2003-0744

The fetchnews NNTP client in leafnode 1.9.3 to 1.9.41 allows remote attackers to cause a denial of service process hang and termination via certain malformed Usenet news articles that cause fetchnews to hang while waiting for input...

CVE-2003-0744

CVE-2003-0744 affects the leafnode NNTP client’s fetchnews component, specifically versions 1.9.3 through 1.9.41. The underlying issue is triggered by certain malformed Usenet articles that cause fetchnews to hang while waiting for input, leading to a denial of service (process hang and terminati...