Inn

inn

Vendor: Isc • 14 CVEs

CVEs (14)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2012-3523 1Isc 1Inn Apr 29, 2026 Nov 11, 2012 N/A· v4 N/A· v3 6.8 MEDIUM· v2 The STARTTLS implementation in nnrpd in INN before 2.5.3 does not properly restrict I/O buffering, which allows man-in-the-middle attackers to insert commands into encrypted sessions by sending a cleartext command that i...Show more The STARTTLS implementation in nnrpd in INN before 2.5.3 does not properly restrict I/O buffering, which allows man-in-the-middle attackers to insert commands into encrypted sessions by sending a cleartext command that is processed after TLS is in place, related to a "plaintext command injection" attack, a similar issue to CVE-2011-0411.Show less
CVE-2004-0045 1Isc 1Inn Apr 16, 2026 Feb 3, 2004 N/A· v4 N/A· v3 7.5 HIGH· v2 Buffer overflow in the ARTpost function in art.c in the control message handling code for INN 2.4.0 may allow remote attackers to execute arbitrary code.
CVE-2002-0525 1Isc 1Inn Apr 16, 2026 Aug 12, 2002 N/A· v4 N/A· v3 10.0 HIGH· v2 Format string vulnerabilities in (1) inews or (2) rnews for INN 2.2.3 and earlier allow local users and remote malicious NNTP servers to gain privileges via format string specifiers in NTTP responses.
CVE-2001-1442 1Isc 1Inn Apr 16, 2026 Apr 21, 2001 N/A· v4 N/A· v3 4.6 MEDIUM· v2 Buffer overflow in innfeed for ISC InterNetNews (INN) before 2.3.0 allows local users in the "news" group to gain privileges via a long -c command line argument.
CVE-2000-0360 1Isc 1Inn Apr 16, 2026 Oct 20, 2000 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Buffer overflow in INN 2.2.1 and earlier allows remote attackers to cause a denial of service via a maliciously formatted article.
CVE-1999-0706 2Isc Redhat 2Inn Linux Apr 16, 2026 Apr 27, 2000 N/A· v4 N/A· v3 7.5 HIGH· v2 Linux xmonisdn package allows local users to gain root privileges by modifying the IFS or PATH environmental variables.
CVE-2000-0472 1Isc 1Inn Apr 16, 2026 Feb 6, 2000 N/A· v4 N/A· v3 3.6 LOW· v2 Buffer overflow in innd 2.2.2 allows remote attackers to execute arbitrary commands via a cancel request containing a long message ID.
CVE-1999-0705 2Isc Redhat 2Inn Linux Apr 16, 2026 Sep 1, 1999 N/A· v4 N/A· v3 7.5 HIGH· v2 Buffer overflow in INN inews program.
CVE-1999-0785 1Isc 1Inn Apr 16, 2026 May 11, 1999 N/A· v4 N/A· v3 7.2 HIGH· v2 The INN inndstart program allows local users to gain root privileges via the "pathrun" parameter in the inn.conf file.
CVE-1999-0754 1Isc 1Inn Apr 16, 2026 May 11, 1999 N/A· v4 N/A· v3 10.0 HIGH· v2 The INN inndstart program allows local users to gain privileges by specifying an alternate configuration file using the INNCONF environmental variable.
CVE-1999-0247 1Isc 1Inn Apr 16, 2026 Jul 21, 1997 N/A· v4 N/A· v3 7.5 HIGH· v2 Buffer overflow in nnrpd program in INN up to version 1.6 allows remote users to execute arbitrary commands.
CVE-1999-0868 5Isc NecNetscape+2 more 6Goah Intrasv Goah NetworksvInn+3 more Apr 16, 2026 Feb 20, 1997 N/A· v4 N/A· v3 7.2 HIGH· v2 ucbmail allows remote attackers to execute commands via shell metacharacters that are passed to it from INN.
CVE-1999-0100 1Isc 1Inn Apr 16, 2026 Jan 1, 1997 N/A· v4 N/A· v3 10.0 HIGH· v2 Remote access in AIX innd 1.5.1, using control messages.
CVE-1999-0043 6Bsdi CalderaIsc+3 more 7Bsd Os Goah IntrasvGoah Networksv+4 more Apr 16, 2026 Dec 4, 1996 N/A· v4 9.8 CRITICAL· v3 10.0 HIGH· v2 Command execution via shell metachars in INN daemon (innd) 1.5 using "newgroup" and "rmgroup" control messages, and others.