Published: 21/04/2001 Updated: 11/07/2017

CVSS v2 Base Score: 4.6 | Impact Score: 6.4 | Exploitability Score: 3.9

VMScore: 470

Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P

Buffer overflow in innfeed for ISC InterNetNews (INN) prior to 2.3.0 allows local users in the "news" group to gain privileges via a long -c command line argument.

Vulnerable Product	Search on Vulmon	Subscribe to Product
isc inn 2.2.3
isc inn 2.0
isc inn 2.1
isc inn 2.2
isc inn 2.2.1
isc inn 2.2.2

source: wwwsecurityfocuscom/bid/2620/info The innfeed utility, part of ISC InterNetNews, has an exploitable buffer overflow in its command-line parser Specifically, innfeed will overflow if an overly long -c option is passed to it A local attacker in the news group could use this overflow to execute arbitary code with an effective user ...

source: wwwsecurityfocuscom/bid/2620/info The innfeed utility, part of ISC InterNetNews, has an exploitable buffer overflow in its command-line parser Specifically, innfeed will overflow if an overly long -c option is passed to it A local attacker in the news group could use this overflow to execute arbitary code with an effective us ...

ISC INN 2.x - Command-Line Buffer Overflow

CVE-2001-1442 ISC INN 2x - Command-Line Buffer Overflow Exploit-DB publication (1): wwwexploit-dbcom/exploits/20777/ Exploit-DB publication (2): wwwexploit-dbcom/exploits/20778/ Packetstorm publication at packetstormsecuritycom/files/24684/defcominnfeedtxthtml Securityfocus publication at wwwsecurityfocuscom/bid/2620/info Author Ale

NVD-CWE-Other http://archives.neohapsis.com/archives/bugtraq/2001-04/0311.html http://www.securityfocus.com/archive/1/178011 http://www.kb.cert.org/vuls/id/943536 http://www.securityfocus.com/bid/2620 http://securitytracker.com/id?1001353 https://exchange.xforce.ibmcloud.com/vulnerabilities/6398 https://nvd.nist.gov https://github.com/alt3kx/CVE-2001-1442 https://www.exploit-db.com/exploits/20777/

CVE-2001-1442

Vulnerability Summary

Exploits

Github Repositories

References

Vulmon Search

About

Products

Connect