CVE-2001-1035

The CVE-2001-1035 issue affects slrn up to version 0.9 and earlier, where the binary decoding feature would execute shell scripts embedded in news posts. Exploitation could allow remote attackers to run commands on the affected host. Public references in Debian’s DSA-078-1 (slrn) describe this as...

CVE-2002-0740

CVE-2002-0740 describes a buffer overflow in the slrnpull component of the SLRN package when installed with setuid/setgid, allowing a local attacker to gain privileges via a long -d (SPOOLDIR) argument. The issue is triggered by an input length that overflows internal buffers, resulting in privil...