CVE-2005-1453 - fetchnews in leafnode 1.9.48 to 1.11.1 allows remote NNTP servers to cause a denial of service (cras

CVE-2005-1453

Summary

fetchnews in leafnode 1.9.48 to 1.11.1 allows remote NNTP servers to cause a denial of service (crash) by closing the connection while fetchnews is reading (1) an article header or (2) an article body, which also prevents fetchnews from querying other servers.

References

Vulnerable Configurations

cpe:2.3:a:leafnode:leafnode:1.9.48:*:*:*:*:*:*:*
cpe:2.3:a:leafnode:leafnode:1.9.48:*:*:*:*:*:*:*
cpe:2.3:a:leafnode:leafnode:1.9.52:*:*:*:*:*:*:*
cpe:2.3:a:leafnode:leafnode:1.9.52:*:*:*:*:*:*:*
cpe:2.3:a:leafnode:leafnode:1.9.53:*:*:*:*:*:*:*
cpe:2.3:a:leafnode:leafnode:1.9.53:*:*:*:*:*:*:*
cpe:2.3:a:leafnode:leafnode:1.10.0:*:*:*:*:*:*:*
cpe:2.3:a:leafnode:leafnode:1.10.0:*:*:*:*:*:*:*
cpe:2.3:a:leafnode:leafnode:1.11.1:*:*:*:*:*:*:*
cpe:2.3:a:leafnode:leafnode:1.11.1:*:*:*:*:*:*:*

CVSS

Base:	5.0 (as of 08-03-2011 - 02:22)
Impact:
Exploitability:

CWE

NVD-CWE-Other

CAPEC

Access

Vector	Complexity	Authentication
NETWORK	LOW	NONE

Impact

Confidentiality	Integrity	Availability
NONE	NONE	PARTIAL

cvss-vector via4

AV:N/AC:L/Au:N/C:N/I:N/A:P

refmap via4

confirm	http://leafnode.sourceforge.net/leafnode-SA-2005-01.txt
secunia	15252
vulnwatch	20050504 leafnode security announcement leafnode-SA-2005-01
vupen	ADV-2005-0468

Last major update

08-03-2011 - 02:22

Published

05-05-2005 - 04:00

Last modified

08-03-2011 - 02:22