CVE-2005-1453 fetchnews in leafnode 1.9.48 to 1.11.1 allows remote NNTP servers to cause a denial of service (crash) by closing the connection while fetchnews is reading (1) an article header or (2) an article body...
MediumCVSS 5.0
EPSS 1.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
fetchnews in leafnode 1.9.48 to 1.11.1 allows remote NNTP servers to cause a denial of service (crash) by closing the connection while fetchnews is reading (1) an article header or (2) an article body, which also prevents fetchnews from querying other servers.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| leafnode | = 1.9.48 | No fix listed |
| leafnode | = 1.9.52 | No fix listed |
| leafnode | = 1.9.53 | No fix listed |
| leafnode | = 1.10.0 | No fix listed |
| leafnode | = 1.11.1 | No fix listed |
| debian/leafnode(Debian:12) | < 1.11.2.rel-1 | 1.11.2.rel-1 |
| debian/leafnode(Debian:13) | < 1.11.2.rel-1 | 1.11.2.rel-1 |
| debian/leafnode(Debian:14) | < 1.11.2.rel-1 | 1.11.2.rel-1 |
References
- 20050504 leafnode security announcement leafnode-SA-2005-01 mailing-list patch
- leafnode.sourceforge.net patch
- 15252 third-party-advisory vendor-advisory
- ADV-2005-0468 vdb-entry
- Debian Security Tracker CVE-2005-1453 vendor-advisory