10
CVSSv2

CVE-2002-0525

Published: 12/08/2002 Updated: 05/09/2008
CVSS v2 Base Score: 10 | Impact Score: 10 | Exploitability Score: 10
VMScore: 1000
Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C

Vulnerability Summary

Format string vulnerabilities in (1) inews or (2) rnews for INN 2.2.3 and previous versions allow local users and remote malicious NNTP servers to gain privileges via format string specifiers in NTTP responses.

Vulnerable Product Search on Vulmon Subscribe to Product

isc inn 2.2.3

isc inn 2.2

isc inn 2.2.2

isc inn 2.0

isc inn 2.1

isc inn 2.2.1

Exploits

source: wwwsecurityfocuscom/bid/4501/info The Internet Software Consortium (ISC) Internet News (INN) project is a powerful, mature implementation of a usenet system, including a NNTP server and a newsreading server It is available for a wide range of Unix based systems, including Linux Multiple vulnerabilities have been reported in two ...