CVE-2002-1661 The leafnode server in leafnode 1.9.20 to 1.9.29 allows remote attackers to cause a denial of service (infinite loop) when leafnode requests a cross-posted article to one group whose name is a prefix....
MediumCVSS 5.0
EPSS 2.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The leafnode server in leafnode 1.9.20 to 1.9.29 allows remote attackers to cause a denial of service (infinite loop) when leafnode requests a cross-posted article to one group whose name is a prefix of another group.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| leafnode | = 1.9.19 | No fix listed |
| leafnode | = 1.9.20 | No fix listed |
| leafnode | = 1.9.21 | No fix listed |
| leafnode | = 1.9.22 | No fix listed |
| leafnode | = 1.9.23 | No fix listed |
| leafnode | = 1.9.24 | No fix listed |
| leafnode | = 1.9.25 | No fix listed |
| leafnode | = 1.9.26 | No fix listed |
| leafnode | = 1.9.27 | No fix listed |
| leafnode | = 1.9.29 | No fix listed |
References
- leafnode.sourceforge.net patch
- 20021229 Leafnode security announcement SA:2002:01 mailing-list
- 20030102 GLSA: leafnode mailing-list
- 7799 third-party-advisory
- 7801 third-party-advisory
- 7870 third-party-advisory
- MDKSA-2003:005 vendor-advisory
- 6490 patch vdb-entry
- 1005865 vdb-entry
- leafnode-nntp-dos(10942) vdb-entry
- Debian Security Tracker CVE-2002-1661 vendor-advisory