Leafnode < 1.11.2 Abrupt Disconnect DoS

Binary data 2880.prm...

LeafNode < 1.9.30 Resource Exhaustion DoS

Binary data 1887.prm...

Mandrake Linux Security Advisory : leafnode (MDKSA-2003:005)

A vulnerability was discovered by Jan Knutar in leafnode that Mark Brown pointed out could be used in a Denial of Service attack. This vulnerability causes leafnode to go into an infinite loop with 100% CPU use when an article that has been crossposed to several groups, one of which is the prefix...

FreeBSD : leafnode fetchnews denial-of-service triggered by truncated transmission (88)

The following package needs to be updated: leafnode %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated by freebsdpkga051a4ec3aa14dd19bdca61eb5700153.nasl. Disabled on 2011/10/02. C Tenable Network Security, Inc. This script contains information extracted from VuXML : Copyright...

DEBIAN-CVE-2003-0744

The fetchnews NNTP client in leafnode 1.9.3 to 1.9.41 allows remote attackers to cause a denial of service process hang and termination via certain malformed Usenet news articles that cause fetchnews to hang while waiting for input...

CVE-2003-0744

The fetchnews NNTP client in leafnode 1.9.3 to 1.9.41 allows remote attackers to cause a denial of service process hang and termination via certain malformed Usenet news articles that cause fetchnews to hang while waiting for input...

CVE-2003-0744

CVE-2003-0744 affects the leafnode NNTP client’s fetchnews component, specifically versions 1.9.3 through 1.9.41. The underlying issue is triggered by certain malformed Usenet articles that cause fetchnews to hang while waiting for input, leading to a denial of service (process hang and terminati...

leafnode DoS

During new fetching program can wait forever...

leafnode 1.9.3 - 1.9.41 security announcement SA-2003-01

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 leafnode-SA-2003:01.fetchnews-hang Topic: potential denial of service in leafnode Announcement: leafnode-SA-2003:01 Writer: Matthias Andree Version: 1.01 Announced: 2003-09-04 Category: main Type: potential denial of service Impact: fetchnews hangs, n...

CVE-2002-1661

The leafnode server in leafnode 1.9.20 to 1.9.29 allows remote attackers to cause a denial of service infinite loop when leafnode requests a cross-posted article to one group whose name is a prefix of another group...

Leafnode CPU exhaustion

If message is crossposted to few groups where one is prefix for another and then requested by message id programs goes into infinite loop...

Leafnode security announcement SA:2002:01

-----BEGIN PGP SIGNED MESSAGE----- leafnode-SA-2002:01.versions Topic: vulnerabilities in leafnode Announcement: leafnode-SA-2002:01 Writer: Matthias Andree Version: 1.00 Announced: 2002-12-29 Category: main Type: denial of service Impact: CPU busy loop Credits: Jan Knutar jknutar, nic dot fi, fo...

leafnode denial-of-service triggered by article request

The leafnode NNTP server may go into an unterminated loop with 100% CPU use when an article is requested by Message-ID that has been crossposted to several news groups when one of the group names is the prefix of another group name that the article was cross-posted to. Found by Jan Knutar...