CVE-2002-1788 Format string vulnerability in the nn_exitmsg function in nn 6.6.0 through 6.6.3 allows remote NNTP servers to execute arbitrary code via format strings in server responses.
HighCVSS 7.5
EPSS 2.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Format string vulnerability in the nn_exitmsg function in nn 6.6.0 through 6.6.3 allows remote NNTP servers to execute arbitrary code via format strings in server responses.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| kim storm nn | = 6.6.0 | No fix listed |
| kim storm nn | = 6.6.1 | No fix listed |
| kim storm nn | = 6.6.2 | No fix listed |
| kim storm nn | = 6.6.3 | No fix listed |
| debian/nn(Debian:12) | < 6.6.4-1 | 6.6.4-1 |
| debian/nn(Debian:13) | < 6.6.4-1 | 6.6.4-1 |
| debian/nn(Debian:14) | < 6.6.4-1 | 6.6.4-1 |
References
- 20020704 nn remote format string vulnerability mailing-list
- nn-error-msg-format-string(9491) patch vdb-entry
- 27086 vdb-entry
- 5160 patch vdb-entry
- Debian Security Tracker CVE-2002-1788 vendor-advisory