Vulnerabilities

TI-2005-01812 CVE-2005-1911 · GHSA-g92w-h4gx-4m3r

The fetchnews NNTP client in leafnode 1.11.2 and earlier can hang while waiting for input…

LOW 25

The fetchnews NNTP client in leafnode 1.11.2 and earlier can hang while waiting for input that never arrives, which allows remote NNTP servers to cause a denial of service (news loss).

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01138 Published 2005-06-08 No fix listed

TI-2005-01375 CVE-2005-1453 · GHSA-3mvm-cfg4-h2w9

fetchnews in leafnode 1.9.48 to 1.11.1 allows remote NNTP servers to cause a denial of…

LOW 26

fetchnews in leafnode 1.9.48 to 1.11.1 allows remote NNTP servers to cause a denial of service (crash) by closing the connection while fetchnews is reading (1) an article header or (2) an article body, which also prevent…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.0143 Published 2005-05-05 No fix listed

TI-2004-01941 CVE-2004-2068 · GHSA-cxw2-7p57-jf87

fetchnews in leafnode 1.9.47 and earlier allows remote attackers to cause a denial of…

LOW 26

fetchnews in leafnode 1.9.47 and earlier allows remote attackers to cause a denial of service (process hang) via an empty NNTP news article with missing mandatory headers.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01634 Published 2005-05-05 No fix listed

TI-2002-01582 CVE-2002-1661 · GHSA-vxpv-xpqv-mxm8

The leafnode server in leafnode 1.9.20 to 1.9.29 allows remote attackers to cause a…

LOW 27

The leafnode server in leafnode 1.9.20 to 1.9.29 allows remote attackers to cause a denial of service (infinite loop) when leafnode requests a cross-posted article to one group whose name is a prefix of another group.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02333 Published 2005-05-05 No fix listed

TI-2003-00687 CVE-2003-0744 · GHSA-3fm7-fqp4-4w7j

The fetchnews NNTP client in leafnode 1.9.3 to 1.9.41 allows remote attackers to cause a…