CVE-2021-31998

<= 2.4.2-170.21.3.1

A Incorrect Default Permissions vulnerability in the packaging of inn of SUSE Linux Enterprise Server 11-SP3; openSUSE Backports S

6.8MEDIUM

CVE-2019-3692

<= 2.4.2-170.21.3.1

The packaging of inn on SUSE Linux Enterprise Server 11; openSUSE Factory, Leap 15.1 allows local attackers to escalate from user

7.7HIGH

CVE-2012-3523

<= 2.5.2

The STARTTLS implementation in nnrpd in INN before 2.5.3 does not properly restrict I/O buffering, which allows man-in-the-middle

CVE-2004-0045

all versions

Buffer overflow in the ARTpost function in art.c in the control message handling code for INN 2.4.0 may allow remote attackers to

CVE-2002-0526

<= 2.2.3

Vulnerability in (1) inews or (2) rnews for INN 2.2.3 and earlier, related to insecure open() calls.

CVE-2002-0525

all versions

Format string vulnerabilities in (1) inews or (2) rnews for INN 2.2.3 and earlier allow local users and remote malicious NNTP serv

CVE-2001-1442

all versions

Buffer overflow in innfeed for ISC InterNetNews (INN) before 2.3.0 allows local users in the "news" group to gain privileges via a

CVE-2000-0360

all versions

Buffer overflow in INN 2.2.1 and earlier allows remote attackers to cause a denial of service via a maliciously formatted article.

CVE-1999-0706

all versions

Linux xmonisdn package allows local users to gain root privileges by modifying the IFS or PATH environmental variables.

CVE-2000-0472

all versions

Buffer overflow in innd 2.2.2 allows remote attackers to execute arbitrary commands via a cancel request containing a long message

CVE-1999-0705

all versions

Buffer overflow in INN inews program.

CVE-1999-0785

all versions

The INN inndstart program allows local users to gain root privileges via the "pathrun" parameter in the inn.conf file.

CVE-1999-0754

all versions

The INN inndstart program allows local users to gain privileges by specifying an alternate configuration file using the INNCONF en

CVE-1999-0247

all versions

Buffer overflow in nnrpd program in INN up to version 1.6 allows remote users to execute arbitrary commands.

CVE-1999-0868

all versions

ucbmail allows remote attackers to execute commands via shell metacharacters that are passed to it from INN.

CVE-1999-0100

all versions

Remote access in AIX innd 1.5.1, using control messages.

CVE-1999-0043

all versions

Command execution via shell metachars in INN daemon (innd) 1.5 using "newgroup" and "rmgroup" control messages, and others.

9.8CRITICAL