CVE-2000-0472

Description

Buffer overflow in innd 2.2.2 allows remote attackers to execute arbitrary commands via a cancel request containing a long message ID.

Affected products

• ISC / inn2.0 – 2.0
• ISC / inn2.1 – 2.1
• ISC / inn2.2 – 2.2
• ISC / inn2.2.1 – 2.2.1
• ISC / inn2.2.2 – 2.2.2

Exploits & proofs of concept

• exploit-dbISC innd 2.x - Remote Buffer Overflowby Michal Zalewski

References

• MISChttp://archives.neohapsis.com/archives/bugtraq/2000-06/0003.html
• MISChttp://archives.neohapsis.com/archives/bugtraq/2000-07/0097.html
• MISChttps://exchange.xforce.ibmcloud.com/vulnerabilities/4615
• MISCftp://ftp.calderasystems.com/pub/OpenLinux/security/CSSA-2000-016.0.txt
• MISChttp://archives.neohapsis.com/archives/bugtraq/2000-07/0298.html
• MISChttp://archives.neohapsis.com/archives/bugtraq/2000-07/0330.html
• MISChttp://www.securityfocus.com/bid/1316