CVE-2002-1789 in newsx

Riassunto

di MITRE

Format string vulnerability in newsx NNTP client before 1.4.8 allows local users to execute arbitrary code via format string specifiers that are not properly handled in a call to the syslog function.

Be aware that VulDB is the high quality source for vulnerability data.

• Prenotare: 29/06/2005
• Divulgazione: 31/12/2002
• Moderazione: accettato
• Voce: VDB-19432
• CPE: pronto
• CWE: CWE-134 (confermato)
• CVSS: 7.2 (NVD)
• EPSS: 0.00406
• KEV: no
• Attività: molto basso

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2002-1789
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2002-1789
• CVE Details: https://www.cvedetails.com/cve/CVE-2002-1789/