inn: vulnerability in INN 2.4.0 [LWN.net]

Package(s):

inn

CVE #(s):

Created:

January 8, 2004

Updated:

January 15, 2004

Description:

A buffer overflow has been discovered in a portion of the control message handling code introduced in INN 2.4.0. It is fairly likely that this overflow could be remotely exploited to gain access to the user innd runs as. INN 2.3.x and earlier are not affected. The INN CURRENT tree is affected. See this advisory for more details.

Alerts:

Slackware	SSA:2004-014-02	2004-01-14
OpenPKG	OpenPKG-SA-2004.001	2004-01-08

(Log in to post comments)