1. CVE-Search
  2. CVE-2002-1661
ID CVE-2002-1661
Summary The leafnode server in leafnode 1.9.20 to 1.9.29 allows remote attackers to cause a denial of service (infinite loop) when leafnode requests a cross-posted article to one group whose name is a prefix of another group.
References
Vulnerable Configurations
  • cpe:2.3:a:leafnode:leafnode:1.9.19:*:*:*:*:*:*:*
    cpe:2.3:a:leafnode:leafnode:1.9.19:*:*:*:*:*:*:*
  • cpe:2.3:a:leafnode:leafnode:1.9.20:*:*:*:*:*:*:*
    cpe:2.3:a:leafnode:leafnode:1.9.20:*:*:*:*:*:*:*
  • cpe:2.3:a:leafnode:leafnode:1.9.21:*:*:*:*:*:*:*
    cpe:2.3:a:leafnode:leafnode:1.9.21:*:*:*:*:*:*:*
  • cpe:2.3:a:leafnode:leafnode:1.9.22:*:*:*:*:*:*:*
    cpe:2.3:a:leafnode:leafnode:1.9.22:*:*:*:*:*:*:*
  • cpe:2.3:a:leafnode:leafnode:1.9.23:*:*:*:*:*:*:*
    cpe:2.3:a:leafnode:leafnode:1.9.23:*:*:*:*:*:*:*
  • cpe:2.3:a:leafnode:leafnode:1.9.24:*:*:*:*:*:*:*
    cpe:2.3:a:leafnode:leafnode:1.9.24:*:*:*:*:*:*:*
  • cpe:2.3:a:leafnode:leafnode:1.9.25:*:*:*:*:*:*:*
    cpe:2.3:a:leafnode:leafnode:1.9.25:*:*:*:*:*:*:*
  • cpe:2.3:a:leafnode:leafnode:1.9.26:*:*:*:*:*:*:*
    cpe:2.3:a:leafnode:leafnode:1.9.26:*:*:*:*:*:*:*
  • cpe:2.3:a:leafnode:leafnode:1.9.27:*:*:*:*:*:*:*
    cpe:2.3:a:leafnode:leafnode:1.9.27:*:*:*:*:*:*:*
  • cpe:2.3:a:leafnode:leafnode:1.9.29:*:*:*:*:*:*:*
    cpe:2.3:a:leafnode:leafnode:1.9.29:*:*:*:*:*:*:*
CVSS
Base: 5.0 (as of 11-07-2017 - 01:29)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
NONE NONE PARTIAL
cvss-vector via4 AV:N/AC:L/Au:N/C:N/I:N/A:P
refmap via4
bid 6490
bugtraq
  • 20021229 Leafnode security announcement SA:2002:01
  • 20030102 GLSA: leafnode
confirm http://leafnode.sourceforge.net/leafnode-SA-2002-01.txt
mandrake MDKSA-2003:005
sectrack 1005865
secunia
  • 7799
  • 7801
  • 7870
xf leafnode-nntp-dos(10942)
Last major update 11-07-2017 - 01:29
Published 31-12-2002 - 05:00
Last modified 11-07-2017 - 01:29
Back to Top