CVE-2004-2068 fetchnews in leafnode 1.9.47 and earlier allows remote attackers to cause a denial of service (process hang) via an empty NNTP news article with missing mandatory headers.
MediumCVSS 5.0
EPSS 1.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
fetchnews in leafnode 1.9.47 and earlier allows remote attackers to cause a denial of service (process hang) via an empty NNTP news article with missing mandatory headers.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| leafnode | = 1.9.25 | No fix listed |
| leafnode | = 1.9.26 | No fix listed |
| leafnode | = 1.9.27 | No fix listed |
| leafnode | = 1.9.28 | No fix listed |
| leafnode | = 1.9.29 | No fix listed |
| leafnode | = 1.9.30 | No fix listed |
| leafnode | = 1.9.31 | No fix listed |
| leafnode | = 1.9.32 | No fix listed |
| leafnode | = 1.9.33 | No fix listed |
| leafnode | = 1.9.34 | No fix listed |
| leafnode | = 1.9.35 | No fix listed |
| leafnode | = 1.9.36 | No fix listed |
| leafnode | = 1.9.37 | No fix listed |
| leafnode | = 1.9.38 | No fix listed |
| leafnode | = 1.9.39 | No fix listed |
| leafnode | = 1.9.40 | No fix listed |
| leafnode | = 1.9.41 | No fix listed |
| leafnode | = 1.9.42 | No fix listed |
| leafnode | = 1.9.43 | No fix listed |
| leafnode | = 1.9.44 | No fix listed |
| leafnode | = 1.9.45 | No fix listed |
| leafnode | = 1.9.46 | No fix listed |
| leafnode | = 1.9.47 | No fix listed |
References
- leafnode.sourceforge.net patch
- 10590 patch third-party-advisory
- 20040109 leafnode -1.9.47 security announcement SA-2004-01 mailing-list
- 3441 vdb-entry
- leafnode-fetchnews-nntp-dos(14189) vdb-entry
- Debian Security Tracker CVE-2004-2068 vendor-advisory