Format String Vulnerabilities in INN Products by Internet Systems Consortium

CVE-2002-0525

What is CVE-2002-0525?

Multiple format string vulnerabilities exist in the inews and rnews components of INN versions up to 2.2.3, allowing both local users and remote malicious NNTP servers to exploit these vulnerabilities. By injecting crafted format string specifiers into NNTP responses, attackers can potentially escalate privileges and execute arbitrary code on affected systems. It is crucial for users of INN to apply necessary updates or mitigations to secure their networks against these vulnerabilities.

References