Description
fetchnews in leafnode 1.9.48 to 1.11.1 allows remote NNTP servers to cause a denial of service (crash) by closing the connection while fetchnews is reading (1) an article header or (2) an article body, which also prevents fetchnews from querying other servers.
Metrics
CVSS 2.0 5.0/10
AV:N/AC:L/Au:N/C:N/I:N/A:PAffected software
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | n/a |
References
- http://archives.neohapsis.com/archives/vulnwatch/2005-q2/0037.htmlPatch
- http://leafnode.sourceforge.net/leafnode-SA-2005-01.txtPatch
- http://secunia.com/advisories/15252Vendor Advisory
- http://www.vupen.com/english/advisories/2005/0468
- http://archives.neohapsis.com/archives/vulnwatch/2005-q2/0037.htmlPatch
- http://leafnode.sourceforge.net/leafnode-SA-2005-01.txtPatch
- http://secunia.com/advisories/15252Vendor Advisory
- http://www.vupen.com/english/advisories/2005/0468
Timeline
- Published
- May 5, 2005
- Last modified
- Jun 16, 2026
- NVD status
- Modified