CVE-2002-0525

The CVE-2002-0525 entry corresponds to a format string vulnerability in INN components (inews or rnews) affecting INN 2.2.3 and earlier. The underlying issue is format string specifiers in NNTP (NTTP) responses, which could allow a local user or a remote malicious NNTP server to gain privileges. ...

CVE-2002-0526

CVE-2002-0526 describes a vulnerability in the INN components (1) inews or (2) rnews for INN versions 2.2.3 and earlier, caused by insecure open() calls. The NVD metrics indicate a LOCAL attack with LOW complexity and no authentication, and potential COMPLETE impact on confidentiality, integrity,...

Format string bugs in INN

No description provided...

ISC InterNetNews (INN) innfeed contains buffer overflow

Overview A locally exploitable buffer overflow exists in ISC InterNetNews. Description InterNetNews is a Usenet/Netnews news server supported by the Internet Software Consortium and volunteers. Innfeed is a component of InterNetNews that implements the NNTP protocol for transerring news between...

CVE-2001-0139

inn 2.2.3 allows local users to overwrite arbitrary files via a symlink attack in some configurations...

CVE-2001-0139

Inn 2.2.3 is vulnerable to a local temporary-file race condition. The root cause is inn creating temporary files in a world-writable directory (or being configured to use one), enabling symlink attacks that may modify files writable by the news user. Mandrake/MDKSA-2001:010 notes a patch that rel...

CVE-2001-0139

inn 2.2.3 allows local users to overwrite arbitrary files via a symlink attack in some configurations...

CVE-2000-0360

Buffer overflow in INN 2.2.1 and earlier allows remote attackers to cause a denial of service via a maliciously formatted article...

CVE-1999-0247

The CVE-1999-0247 entry concerns the INN project’s nnrpd component, where a buffer overflow in nnrpd (INN up to version 1.6) can allow remote commands to be executed. The connected sources confirm the affected software (nnrpd) and the underlying issue (buffer overflow) that enables arbitrary comm...

CVE-1999-0247

Buffer overflow in nnrpd program in INN up to version 1.6 allows remote users to execute arbitrary commands...

CVE-2000-0360

Buffer overflow in INN 2.2.1 and earlier allows remote attackers to cause a denial of service via a maliciously formatted article...

CVE-2000-0360

INN buffer overflow (CVE-2000-0360) affects INN servers prior to 2.2.2, where the remote server fails to perform proper bounds checking, allowing a remote attacker to crash the service by sending a maliciously formatted news article. Public sources (NVD/Nessus/OpenVAS) corroborate a remote DoS ri...

ISC innd 2.x - Remote Buffer Overflow

ISC innd 2.x - Remote Buffer Overflow // source: https://www.securityfocus.com/bid/1316/info innd 2.2.2 contains a remotely exploitable buffer overflow in code reached when a cancel request is sent to the "control" newsgroup, under the following condition: the cancel request contains a valid...

INN < 2.2.3 verifycancels Option Cancel Request Message Overflow

The remote version of INN is between 2.0 and 2.2.2 There is a known security flaw in this version of INN which may allow an attacker to execute arbitrary code on this server is the option 'verifycancels' is enabled in inn.conf C Tenable Network Security, Inc. include"compat.inc"; ifdescription...

CVE-1999-0754

CVE-1999-0754 concerns the INN inndstart program, where local users can gain privileges by specifying an alternate configuration file via the INNCONF environment variable. The available connected records confirm this vulnerability exists in INN’s inndstart component and describe the privilege-esc...

CVE-1999-0754

The INN inndstart program allows local users to gain privileges by specifying an alternate configuration file using the INNCONF environmental variable...

CVE-1999-0785

The INN inndstart program allows local users to gain root privileges via the "pathrun" parameter in the inn.conf file...

CVE-1999-0785

The CVE-1999-0785 entry concerns the INN inndstart component, where a local attacker can gain root privileges through the pathrun parameter in the inn.conf file. This aligns across NVD/Red Hat/CVE records. The vulnerability enables local privilege escalation by manipulating configuration to influ...

CVE-1999-0705

CVE-1999-0705 concerns a buffer overflow in INN inews. The interconnected sources indicate multiple vulnerabilities in INN

CVE-1999-0868

CVE-1999-0868 concerns ucbmail where remote attackers can execute commands by supplying shell metacharacters to ucbmail via INN. Multiple connected sources (Red Hat, CVE/CVEList, NVD) reiterate the same vulnerability description but do not provide concrete fix versions or patches within the suppl...