high7.5Public exploit code
CVE-2002-0913
Format string vulnerability in log_doit function of Slurp NNTP client 1.1.0 allows a malicious news server to execute arbitrary code on the client via format s…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Slurp 1.10 - SysLog Remote Format String2002-06-04 · dos · freebsd · Verified
Impact
Format string vulnerability in log_doit function of Slurp NNTP client 1.1.0 allows a malicious news server to execute arbitrary code on the client via format strings in a server response.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Stephen Hebditch | Slurp | Version 1.1.0 |
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/bugtraq/2002-06/0014.html
- http://marc.info/?l=vuln-dev&m=102323341407280&w=2
- http://www.iss.net/security_center/static/9270.php
- http://www.securityfocus.com/bid/4935
- http://archives.neohapsis.com/archives/bugtraq/2002-06/0014.html
- http://marc.info/?l=vuln-dev&m=102323341407280&w=2
- http://www.iss.net/security_center/static/9270.php
- http://www.securityfocus.com/bid/4935