CVE-2002-0909

Multiple buffer overflows in mnews 1.22 and earlier allow 1 a remote NNTP server to execute arbitrary code via long responses, or local users can gain privileges via long command line arguments 2 -f, 3 -n, 4 -D, 5 -M, or 6 -P, or via long environment variables 7 JNAMES or 8 MAILSERVER...

CVE-2002-0525: Undefined Security Weakness

Format string vulnerabilities in 1 inews or 2 rnews for INN 2.2.3 and earlier allow local users and remote malicious NNTP servers to gain privileges via format string specifiers in NTTP responses...