VULNERABILITY INTELLIGENCE
CVE-2002-0525
CVSS score10 HIGH
EPSS probability4.12%
CISA KEVNot currently listed
Published2002-08-12
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:C/I:C/A:C
Description
Format string vulnerabilities in (1) inews or (2) rnews for INN 2.2.3 and earlier allow local users and remote malicious NNTP servers to gain privileges via format string specifiers in NTTP responses.
Primary references
- cve@mitre.org
- cve@mitre.org — Vendor Advisory
- cve@mitre.org — Exploit, Patch, Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Exploit, Patch, Vendor Advisory