FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

CVE-2002-1661

This CVE name corresponds to:

Entered	Topic
2004-05-21	leafnode denial-of-service triggered by article request

The following information is adapted from the Common Vulnerabilities and Exposures (CVE) project. CVE and the CVE logo are trademarks of The MITRE Corporation. CVE content is Copyright 2005, The MITRE Corporation.

CVE-2002-1661 at cve.mitre.org

Details

Type	Candidate
Name	CVE-2002-1661
Phase	Assigned(20050505)

Description

The leafnode server in leafnode 1.9.20 to 1.9.29 allows remote attackers to cause a denial of service (infinite loop) when leafnode requests a cross-posted article to one group whose name is a prefix of another group.

References

Source	Reference
BUGTRAQ	20021229 Leafnode security announcement SA:2002:01
CONFIRM	http://leafnode.sourceforge.net/leafnode-SA-2002-01.txt
BUGTRAQ	20030102 GLSA: leafnode
MANDRAKE	MDKSA-2003:005
BID	6490
SECTRACK	1005865
SECUNIA	7799
SECUNIA	7801
SECUNIA	7870
XF	leafnode-nntp-dos(10942)