Vendors / Tin Records 3 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 2
Exploited now Tin records in CISA KEV No Tin vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority LOW 38
Off-by-one error in TIN 1.8.0 and earlier might allow attackers to execute arbitrary code via unknown vectors that trigger a buffer overflow.
CVSS 2.0 HIGH 7.5· Network · No auth · Interaction — · EPSS 0.02881 · Published 2006-02-21 · No fix listed
Priority LOW 35
Multiple buffer overflows in TIN before 1.8.2 have unspecified impact and attack vectors, a different vulnerability than CVE-2006-0804.
CVSS 2.0 HIGH 7.5· Network · No auth · Interaction — · EPSS 0.01204 · Published 2006-11-26 · No fix listed
Priority LOW 25
UNIX news readers tin and rtin create the /tmp/.tin_log file with insecure permissions and follow symlinks, which allows attackers to modify the permissions of files writable by the user via a symlink attack.
CVSS 2.0 MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.01282 · Published 2001-09-12 · No fix listed
Open these records in search → All records by CVSS severity
0 2 1 0 0
