260 matches found
INN buffer overflow
The remote version of this INN InterNetNews server does not do proper bounds checking. SPDX-FileCopyrightText: 2004 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
Slackware 9.0 / 9.1 / current : INN security update (SSA:2004-014-02)
INN InterNetNews is used to run a news NNTP server. New INN packages are available for Slackware 9.0, 9.1, and -current. These have been upgraded to inn-2.4.1 to fix a potentially exploitable buffer overflow. All sites running INN should upgrade. %NASLMINLEVEL 70300 C Tenable Network Security, In...
CVE-2001-1442
Buffer overflow in innfeed for ISC InterNetNews INN before 2.3.0 allows local users in the "news" group to gain privileges via a long -c command line argument...
CVE-2001-1442
CVE-2001-1442 affects ISC InterNetNews (INN) via a buffer overflow in innfeed prior to 2.3.0. Local users in the news group can gain privileges through a long -c argument. Reports across CVE listings confirm the impact but no public exploitation details or patches are included in the provided doc...
INN < 2.2.2 Crafted Article Handling Remote Overflow
The remote host is running INN InterNetNews. The remote version of this server does not do proper bounds checking. An attacker may exploit this issue to crash the remote service by overflowing some of the buffers by sending a maliciously formatted news article. C Tenable Network Security, Inc...
CVE-2004-0045
Buffer overflow in the ARTpost function in art.c in the control message handling code for INN 2.4.0 may allow remote attackers to execute arbitrary code...
CVE-2004-0045
CVE-2004-0045 affects the InterNetNews INN 2.4.0 NNTP server component (control message handling). A boundary/overflow condition in the ARTpost function within art.c can allow a remote attacker to execute arbitrary code. Public advisories (e.g., Slackware SSA 2004-014-02) note a fixed package upd...
CVE-2004-0045
Buffer overflow in the ARTpost function in art.c in the control message handling code for INN 2.4.0 may allow remote attackers to execute arbitrary code...
FreeBSD : Buffer overflow in INN control message handling (78)
The following package needs to be updated: inn-stable %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated by freebsdpkgfd376b8b41e111d8b0960020ed76ef5a.nasl. Disabled on 2011/10/02. C Tenable Network Security, Inc. This script contains information extracted from VuXML : Copyright...
CVE-2004-0045
Buffer overflow in the ARTpost function in art.c in the control message handling code for INN 2.4.0 may allow remote attackers to execute arbitrary code...
CVE-2004-0045
Buffer overflow in the ARTpost function in art.c in the control message handling code for INN 2.4.0 may allow remote attackers to execute arbitrary code...
ISC InterNetNews (INN) contains buffer overflow in ARTpost() function
Overview The Internet Software Consortium's ISC InterNetNews INN is a Usenet application. A vulnerability in INN may permit a remote attacker to compromise the system. Description Version 2.4.0 of ISC's InterNetNews package contains a Network News Transfer Protocol NNTP server that contains a...
INN security update
INN InterNetNews is used to run a news NNTP server. New INN packages are available for Slackware 9.0, 9.1, and -current. These have been upgraded to inn-2.4.1 to fix a potentially exploitable buffer overflow. All sites running INN should upgrade. Here are the details from the Slackware 9.1...
[SECURITY] INN: Buffer overflow in control message handling
A buffer overflow has been discovered in a portion of the control message handling code introduced in INN 2.4.0. It is fairly likely that this overflow could be remotely exploited to gain access to the user innd runs as. INN 2.3.x and earlier are not affected. The INN CURRENT tree is affected. So...
INN < 2.4.1 Control Message Handling Code Overflow
The remote host is running INN 2.4.0. There is a known security flaw in this version of INN that could allow an attacker to execute arbitrary code on this server. C Tenable Network Security, Inc. Ref: http://www.isc.org/products/INN/ include"compat.inc"; ifdescription scriptid11984; scriptversion...
Buffer overflow in INN control message handling
A small, fixed-size stack buffer is used to construct a filename based on a received control message. This could result in a stack buffer overflow...
CVE-2002-0526
Vulnerability in 1 inews or 2 rnews for INN 2.2.3 and earlier, related to insecure open calls...
CVE-2002-0525
Format string vulnerabilities in 1 inews or 2 rnews for INN 2.2.3 and earlier allow local users and remote malicious NNTP servers to gain privileges via format string specifiers in NTTP responses...