CVE-2001-1442 Buffer overflow in innfeed for ISC InterNetNews (INN) before 2.3.0 allows local users in the "news" group to gain privileges via a long -c command line argument.
MediumCVSS 4.6
EPSS 1.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Buffer overflow in innfeed for ISC InterNetNews (INN) before 2.3.0 allows local users in the "news" group to gain privileges via a long -c command line argument.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| isc inn | = 2.0 | No fix listed |
| isc inn | = 2.1 | No fix listed |
| isc inn | = 2.2 | No fix listed |
| isc inn | = 2.2.1 | No fix listed |
| isc inn | = 2.2.2 | No fix listed |
| isc inn | = 2.2.3 | No fix listed |
| debian/inn2(Debian:12) | < 2.3.3+20020922-1 | 2.3.3+20020922-1 |
| debian/inn2(Debian:14) | < 2.3.3+20020922-1 | 2.3.3+20020922-1 |
| debian/inn2(Debian:13) | < 2.3.3+20020922-1 | 2.3.3+20020922-1 |
References
- 20010418 Innfeed Buffer Overflow exploit mailing-list
- 1001353 exploit vdb-entry
- VU#943536 third-party-advisory us-government-resource
- 20010418 Re: Innfeed Buffer Overflow exploit mailing-list patch
- 2620 exploit patch vdb-entry
- innfeed-c-bo(6398) vdb-entry
- Debian Security Tracker CVE-2001-1442 vendor-advisory