Lucene search
HistoryAug 12, 2002 - 4:00 a.m.
CVE-2002-0525
cve-2002-0525
inn 2.2.3
inews
rnews
vulnerabilities
nntp servers
privileges.
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
7.4 High
AI Score
Confidence
Low
0.005 Low
EPSS
Percentile
75.7%
Format string vulnerabilities in (1) inews or (2) rnews for INN 2.2.3 and earlier allow local users and remote malicious NNTP servers to gain privileges via format string specifiers in NTTP responses.
Affected configurations
Node
iscinnMatch2.0
ORiscinnMatch2.1
ORiscinnMatch2.2
ORiscinnMatch2.2.1
ORiscinnMatch2.2.2
ORiscinnMatch2.2.3
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
7.4 High
AI Score
Confidence
Low
0.005 Low
EPSS
Percentile
75.7%
Related for CVE-2002-0525