Leafnode NNTP proxy DoS

DoS ifserver closes connection before all data received...

leafnode security announcement leafnode-SA-2005-02 (CAN-2005-1911)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 leafnode-SA-2005:02.fetchnews-hangs-on-header Topic: potential denial of service in leafnode Announcement: leafnode-SA-2005:02 Author: Matthias Andree Version: 1.00 Announced: 2005-06-08 Category: main Type: potential denial of service Impact: fetchne...

CVE-2005-1911

The fetchnews NNTP client in leafnode 1.11.2 and earlier can hang while waiting for input that never arrives, which allows remote NNTP servers to cause a denial of service news loss...

CVE-2005-1911

The fetchnews NNTP client in leafnode 1.11.2 and earlier can hang while waiting for input that never arrives, which allows remote NNTP servers to cause a denial of service news loss...

CVE-2005-1911

The fetchnews NNTP client in leafnode 1.11.2 and earlier can hang while waiting for input that never arrives, which allows remote NNTP servers to cause a denial of service news loss...

CVE-2005-1911

The fetchnews NNTP client in leafnode 1.11.2 and earlier can hang while waiting for input that never arrives, which allows remote NNTP servers to cause a denial of service news loss...

CVE-2005-1911

Leafnode’s CVE-2005-1911 affects the fetchnews NNTP client (in leafnode up to version 1.11.2). A hang can occur while waiting for input, allowing remote servers to cause a denial of service (news loss) by stalling fetchnews. The Red Hat advisory and related OpenVAS entries confirm this issue for ...

leafnode -- denial of service vulnerability

Matthias Andree reports: A vulnerability was found in the fetchnews program the NNTP client that may under some circumstances cause a wait for input that never arrives, fetchnews "hangs". ... As only one fetchnews program can run at a time, subsequently started fetchnews and texpire programs will...

leafnode security announcement leafnode-SA-2005-01

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 leafnode-SA-2005:01.fetchnews-crashes-on-timeout Topic: potential denial of service in leafnode Announcement: leafnode-SA-2005:01 Writer: Matthias Andree Version: 1.00 Announced: 2005-05-04 Category: main Type: potential denial of service Impact:...

CVE-2005-1453

fetchnews in leafnode 1.9.48 to 1.11.1 allows remote NNTP servers to cause a denial of service crash by closing the connection while fetchnews is reading 1 an article header or 2 an article body, which also prevents fetchnews from querying other servers...

CVE-2005-1453

fetchnews in leafnode 1.9.48 to 1.11.1 allows remote NNTP servers to cause a denial of service crash by closing the connection while fetchnews is reading 1 an article header or 2 an article body, which also prevents fetchnews from querying other servers...

CVE-2004-2068

fetchnews in leafnode 1.9.47 and earlier allows remote attackers to cause a denial of service process hang via an empty NNTP news article with missing mandatory headers...

CVE-2005-1453

fetchnews in leafnode 1.9.48 to 1.11.1 allows remote NNTP servers to cause a denial of service crash by closing the connection while fetchnews is reading 1 an article header or 2 an article body, which also prevents fetchnews from querying other servers...

NNTP Server Password Handling Remote Overflow

Nessus was able to crash the remote NNTP server by sending a too long password. This flaw is probably a buffer overflow and might be exploitable to run arbitrary code on this machine. C Tenable Network Security, Inc. Overflow on the user name is tested by cassandranntpdos.nasl NNTP protocol is...

NNTP Server Message Header Handling Remote Overflow

Nessus was able to crash the remote NNTP server by sending a message with long headers. This flaw is probably a buffer overflow and might be exploitable to run arbitrary code on this machine. C Tenable Network Security, Inc. Overflow on the user name is tested by cassandranntpdos.nasl NNTP protoc...

News Server (NNTP) Anonymous Read / Write Access

The remote server seems open to remote users. Some people prefer open public NNTP servers to be able to read or post articles anonymously. Unwanted connections could waste your bandwidth or put you into legal trouble if a malicious person were to use your server to post abusive articles. Keep in...

GLSA-200502-05 : Newspost: Buffer overflow vulnerability

The remote host is affected by the vulnerability described in GLSA-200502-05 Newspost: Buffer overflow vulnerability Niels Heinen has discovered a buffer overflow in the socketgetline function of Newspost, which can be triggered by providing long strings that do not end with a newline character...

CVE-2005-0101

Buffer overflow in the socketgetline function in Newspost 2.1.1 and earlier allows remote malicious NNTP servers to execute arbitrary code via a long string without a newline character...

CVE-2005-0101

CVE-2005-0101 affects Newspost (2.1.1 and earlier). The flaw is a buffer overflow in socket_getline reads from NNTP servers when long responses lack a newline, enabling remote code execution with the newspost process privileges. Public sources (Gentoo GLSA 200502-05, OpenVAS/Nessus entries) descr...

[SA14094] newsfetch NNTP Response Handling Buffer Overflows

TITLE: newsfetch NNTP Response Handling Buffer Overflows SECUNIA ADVISORY ID: SA14094 VERIFY ADVISORY: http://secunia.com/advisories/14094/ CRITICAL: Less critical IMPACT: System access WHERE: From remote SOFTWARE: newsfetch 1.x http://secunia.com/product/4591/ DESCRIPTION: Niels Heinen has...