CVE-2001-1442

MediumCVSS 4.6/10Last modified Jun 16, 2026

Description

Buffer overflow in innfeed for ISC InterNetNews (INN) before 2.3.0 allows local users in the "news" group to gain privileges via a long -c command line argument.

Metrics

CVSS 2.0 4.6/10AV:L/AC:L/Au:N/C:P/I:P/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://archives.neohapsis.com/archives/bugtraq/2001-04/0311.htmlExploit
http://securitytracker.com/id?1001353Exploit
http://www.kb.cert.org/vuls/id/943536US Government Resource
http://www.securityfocus.com/archive/1/178011Exploit, Patch
http://www.securityfocus.com/bid/2620Exploit, Patch
https://exchange.xforce.ibmcloud.com/vulnerabilities/6398
http://archives.neohapsis.com/archives/bugtraq/2001-04/0311.htmlExploit
http://securitytracker.com/id?1001353Exploit
http://www.kb.cert.org/vuls/id/943536US Government Resource
http://www.securityfocus.com/archive/1/178011Exploit, Patch
http://www.securityfocus.com/bid/2620Exploit, Patch
https://exchange.xforce.ibmcloud.com/vulnerabilities/6398

Timeline

Published: Apr 21, 2001
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2001

CVE-2001-14435.0KTH Kerberos IV and Kerberos V (Heimdal) for Telnet clients do not encrypt connections if the server does not support the requested encrypti CVE-2001-14447.5The Kerberos Telnet protocol, as implemented by KTH Kerberos IV and Kerberos V (Heimdal), does not encrypt authentication and encryption opt CVE-2001-14457.5Unknown vulnerability in the SMTP server in Lotus Domino 5.0 through 5.7 allows remote attackers to bypass mail relaying restrictions via cr CVE-2001-14467.5Find-By-Content in Mac OS X 10.0 through 10.0.4 creates world-readable index files named .FBCIndex in every directory, which allows remote a CVE-2001-14477.2NetInfo Manager for Mac OS X 10.0 through 10.1 allows local users to gain root privileges by opening applications using the (1) "recent item CVE-2001-14484.6Magic eDeveloper Enterprise Edition 8.30-5 and earlier allows local users to overwrite arbitrary files and possibly execute code via a symli CVE-2001-14497.5The default installation of Apache before 1.3.19 on Mandrake Linux 7.1 through 8.0 and Linux Corporate Server 1.0.1 allows remote attackers CVE-2001-14502.6Microsoft Internet Explorer 5.0 through 6.0 allows attackers to cause a denial of service (browser crash) via a crafted FTP URL such as "/.#CVE-2001-14515.0Memory leak in the SNMP LAN Manager (LANMAN) MIB extension for Microsoft Windows 2000 before SP3, when the Print Spooler is not running, all CVE-2001-14527.5By default, DNS servers on Windows NT 4.0 and Windows 2000 Server cache glue records received from non-delegated name servers, which allows CVE-2001-14537.5Buffer overflow in libmysqlclient.so in MySQL 3.23.33 and earlier allows remote attackers to execute arbitrary code via a long host paramete CVE-2001-14547.5Buffer overflow in MySQL before 3.23.33 allows remote attackers to execute arbitrary code via a long drop database request.