CVE-2001-1442

Description

Buffer overflow in innfeed for ISC InterNetNews (INN) before 2.3.0 allows local users in the "news" group to gain privileges via a long -c command line argument.

Affected products

• ISC / inn2.0 – 2.0
• ISC / inn2.1 – 2.1
• ISC / inn2.2 – 2.2
• ISC / inn2.2.1 – 2.2.1
• ISC / inn2.2.2 – 2.2.2
• ISC / inn2.2.3 – 2.2.3

Exploits & proofs of concept

• exploit-dbISC INN 2.x - Command-Line Buffer Overflow (2)by Enrique A.
• exploit-dbISC INN 2.x - Command-Line Buffer Overflow (1)by Enrique A.

References

• MISChttp://www.kb.cert.org/vuls/id/943536
• MISChttps://exchange.xforce.ibmcloud.com/vulnerabilities/6398
• MISChttp://securitytracker.com/id?1001353
• MISChttp://www.securityfocus.com/bid/2620
• MISChttp://www.securityfocus.com/archive/1/178011
• MISChttp://archives.neohapsis.com/archives/bugtraq/2001-04/0311.html