Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Format string vulnerabilities in (1) inews or (2) rnews for INN 2.2.3 and earlier allow local users and remote malicious NNTP servers to gain privileges via format string specifiers in NTTP responses.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
ISC INN多个本地格式串溢出漏洞
Vulnerability Description
Internet Software Consortium (ISC) Internet News (INN)是一款强大的USENET系统，包括NNTP服务器和新闻阅读服务器，可使用在大多数UNIX操作系统下，包括Linux。 Internet News (INN)包含的inews和rnews对用户提交的输入过滤，本地攻击者可以利用这个漏洞通过格式字符串攻击方式以news进程在系统上执行任意指令。 Internet News (INN)包含的inews和rnews某些函数对用户提交的输入缺少过滤，攻击者可以
CVSS Information
N/A
Vulnerability Type
N/A