CVE-2008-3252

Stack-based buffer overflow in the readarticle function in getarticle.c in newsx 1.6 allows remote attackers to execute arbitrary code via a news article containing a large number of lines starting with a period...

Stack overflow

Stack-based buffer overflow in the readarticle function in getarticle.c in newsx 1.6 allows remote attackers to execute arbitrary code via a news article containing a large number of lines starting with a period...

CVE-2008-3252

CVE-2008-3252 : In newsx 1.6, a stack-based buffer overflow in read_article (getarticle.c) allows remote code execution when processing a news article containing a large number of lines starting with a period. The issue is triggered by the pathological article input, leading to arbitrary code exe...

newsx 'read_article()'缓冲区溢出漏洞

BUGTRAQ ID: 30231 CNCAN ID：CNCAN-2008071603 NewsX NNTP客户端是一款用于访问Internet News服务器的程序。 NewsX 'readarticle'存在缓冲区溢出，远程攻击者可以利用漏洞以应用程序权限执行任意指令。 问题代码如下： --- src/getarticle.c --- static int readarticlelong where,char group char linebufMAXHEADERSIZE+1, line; ... line=linebuf; ... for ;; if...