debian/canna vulnerabilities

Latest debian/canna CVEs

Newest publication first

1. CVE-2002-1159 Canna 3.6 and earlier does not properly validate requests, which allows remote attackers to cause a denial of service or information leak.

   Published 2004-09-01

   Medium·CVSS 6.4 EPSS 1.9%

   Canna 3.6 and earlier does not properly validate requests, which allows remote attackers to cause a denial of service or information leak.

2. CVE-2002-1158 Buffer overflow in the irw_through function for Canna 3.5b2 and earlier allows local users to execute arbitrary code as the bin user.

   Published 2004-09-01

   High·CVSS 7.2 EPSS 0.49%

   Buffer overflow in the irw_through function for Canna 3.5b2 and earlier allows local users to execute arbitrary code as the bin user.

3. DSA-224 canna - buffer overflow and more

   Published 2003-01-08

   Unknown

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.