CVE-2003-0744 The fetchnews NNTP client in leafnode 1.9.3 to 1.9.41 allows remote attackers to cause a denial of service (process hang and termination) via certain malformed Usenet news articles that cause fetchnew...
MediumCVSS 5.0
EPSS 1.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The fetchnews NNTP client in leafnode 1.9.3 to 1.9.41 allows remote attackers to cause a denial of service (process hang and termination) via certain malformed Usenet news articles that cause fetchnews to hang while waiting for input.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| leafnode | = 1.9.19 | No fix listed |
| leafnode | = 1.9.20 | No fix listed |
| leafnode | = 1.9.21 | No fix listed |
| leafnode | = 1.9.22 | No fix listed |
| leafnode | = 1.9.23 | No fix listed |
| leafnode | = 1.9.24 | No fix listed |
| leafnode | = 1.9.25 | No fix listed |
| leafnode | = 1.9.26 | No fix listed |
| leafnode | = 1.9.27 | No fix listed |
| leafnode | = 1.9.29 | No fix listed |
| leafnode | = 1.9.30 | No fix listed |
| leafnode | = 1.9.31 | No fix listed |
| leafnode | = 1.9.35 | No fix listed |
| leafnode | = 1.9.36 | No fix listed |
| leafnode | = 1.9.37 | No fix listed |
| leafnode | = 1.9.38 | No fix listed |
| leafnode | = 1.9.39 | No fix listed |
| leafnode | = 1.9.40 | No fix listed |
| leafnode | = 1.9.41 | No fix listed |
| debian/leafnode(Debian:12) | < 1.9.42 | 1.9.42 |
| debian/leafnode(Debian:13) | < 1.9.42 | 1.9.42 |
| debian/leafnode(Debian:14) | < 1.9.42 | 1.9.42 |
References
- 20030903 leafnode 1.9.3 - 1.9.41 security announcement SA-2003-01 mailing-list vendor-advisory
- leafnode.sourceforge.net
- 20030904 leafnode 1.9.3 - 1.9.41 security announcement SA-2003-01 mailing-list
- 9678 third-party-advisory
- 6452 vdb-entry
- 8541 vdb-entry
- Debian Security Tracker CVE-2003-0744 vendor-advisory