Vendors / Slrn Development Team Records 2 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0 CVSS 9.0–10.0
CVSS high 2 CVSS 7.0–8.9
Exploited now Slrn Development Team records in CISA KEV No Slrn Development Team vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority LOW 37
Binary decoding feature of slrn 0.9 and earlier allows remote attackers to execute commands via shell scripts that are inserted into a news post.
CVSS 2.0 HIGH 7.5· Network · No auth · Interaction — · EPSS 0.0211 · Published 2002-03-09 · No fix listed
Priority LOW 35
Buffer overflow in slrnpull for the SLRN package, when installed setuid or setgid, allows local users to gain privileges via a long -d (SPOOLDIR) argument.
CVSS 2.0 HIGH 7.2· Local · No auth · Interaction — · EPSS 0.0147 · Published 2002-07-26 · No fix listed
Open these records in search → All records by CVSS severity
Critical0 High2 Medium0 Low0 No CVSS0