Published: 21/07/2008 Updated: 08/08/2017

CVSS v2 Base Score: 10 | Impact Score: 10 | Exploitability Score: 10

VMScore: 890

Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C

Stack-based buffer overflow in the read_article function in getarticle.c in newsx 1.6 allows remote malicious users to execute arbitrary code via a news article containing a large number of lines starting with a period.

Vulnerable Product	Search on Vulmon	Subscribe to Product
fedora newsx 1.6

It was discovered that newsx, an NNTP news exchange utility, was affected by a buffer overflow allowing remote attackers to execute arbitrary code via a news article containing a large number of lines starting with a period For the stable distribution (etch), this problem has been fixed in version 16-2etch1 For the testing (lenny) and unstable d ...

CWE-119 https://bugzilla.redhat.com/show_bug.cgi?id=454483 https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00485.html https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00565.html http://www.securityfocus.com/bid/30231 http://secunia.com/advisories/31080 http://secunia.com/advisories/31307 http://www.debian.org/security/2008/dsa-1622 https://exchange.xforce.ibmcloud.com/vulnerabilities/43844 https://nvd.nist.gov https://www.debian.org/security/./dsa-1622

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2008-3252

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect