FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

CVE-2005-0101

This CVE name corresponds to:

Entered	Topic
2005-02-01	newspost -- server response buffer overflow vulnerability

The following information is adapted from the Common Vulnerabilities and Exposures (CVE) project. CVE and the CVE logo are trademarks of The MITRE Corporation. CVE content is Copyright 2005, The MITRE Corporation.

CVE-2005-0101 at cve.mitre.org

Details

Type	Candidate
Name	CVE-2005-0101
Phase	Assigned(20050118)

Description

Buffer overflow in the socket_getline function in Newspost 2.1.1 and earlier allows remote malicious NNTP servers to execute arbitrary code via a long string without a newline character.

References

Source	Reference
BUGTRAQ	20050202 RE: SECURITEY.NNOV.RU NewsPost buffer overflow [EXPLOIT]
MISC	http://people.freebsd.org/~niels/issues/newspost-20050114.txt
CONFIRM	http://www.vuxml.org/freebsd/7f13607b-6948-11d9-8937-00065be4b5b6.html
GENTOO	GLSA-200502-05
BID	12418
SECTRACK	1013056
SECUNIA	14092
SECUNIA	14098
XF	newspost-socketgetline-bo(19178)