MS04-036: Microsoft NNTP Component Remote Overflow (883935) (uncredentialed check)

The remote host is running a version of Microsoft NNTP server that is vulnerable to a buffer overflow issue. An attacker may exploit this flaw to execute arbitrary commands on the remote host with the privileges of the NNTP server process. C Tenable Network Security, Inc. include"compat.inc"; if...

NNTP Server Type and Version

Binary data 1888.prm...

leafnode denial-of-service triggered by article request

The leafnode NNTP server may go into an unterminated loop with 100% CPU use when an article is requested by Message-ID that has been crossposted to several news groups when one of the group names is the prefix of another group name that the article was cross-posted to. Found by Jan Knutar...

CVE-2002-0909

Multiple buffer overflows in mnews 1.22 and earlier allow 1 a remote NNTP server to execute arbitrary code via long responses, or local users can gain privileges via long command line arguments 2 -f, 3 -n, 4 -D, 5 -M, or 6 -P, or via long environment variables 7 JNAMES or 8 MAILSERVER...

CVE-2002-0525: Undefined Security Weakness

Format string vulnerabilities in 1 inews or 2 rnews for INN 2.2.3 and earlier allow local users and remote malicious NNTP servers to gain privileges via format string specifiers in NTTP responses...

Format string bug in slurp

Format string bug on processing NNTP server reply...

Multiple buffer overflows in mnews

Buffer overflows on command line processing, environment variables and NNTP server response handling...

ISC INN 2.02.12.2.x - Multiple Local Format String Vulnerabilities

ISC INN 2.02.12.2.x - Multiple Local Format String Vulnerabilities source: https://www.securityfocus.com/bid/4501/info The Internet Software Consortium ISC Internet News INN project is a powerful, mature implementation of a usenet system, including a NNTP server and a newsreading server. It is...

CVE-2000-0341

The CVE-2000-0341 entry concerns ATRIUM Cassandra NNTP Server 1.10. The connected Nessus plugin and CVE listings indicate a remote buffer overflow in the AUTHINFO USER handling: providing a long login name can crash the server and, per the plugin, could allow remote code execution. This is a netw...

CVE-2000-0341

ATRIUM Cassandra NNTP Server 1.10 allows remote attackers to cause a denial of service via a long login name...

CVE-2000-0341: Undefined Security Weakness

ATRIUM Cassandra NNTP Server 1.10 allows remote attackers to cause a denial of service via a long login name...

Cassandra NNTP Server Login Name Remote Overflow DoS

A vulnerable version of Cassandra NNTP Server appears to be running on the remote host. Providing a long argument to the 'AUTHINFO USER' command results in a buffer overflow. A remote attacker could use this to create a denial of service, or possibly execute arbitrary code. C Tenable Network...

CVE-2000-0341

ATRIUM Cassandra NNTP Server 1.10 allows remote attackers to cause a denial of service via a long login name...

NetWin DNews 5.3 Server - Remote Buffer Overflow

source: https://www.securityfocus.com/bid/1172/info DNews News Server is a CGI application that gives access to auser's NNTP server over the web. There are many unchecked buffers in the program, some of which can be exploited directly from any browser. Supplying an overlylong value for the "group...

NNTP Server Detection

The remote host is running a news server NNTP. Make sure that hosting such a server is authorized by your company policy. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid10159; scriptversion "1.24"; scriptcvsdate"Date: 2019/11/22"; name"english" = "NNTP Server...