CVE

Id
4916  
CVE No.
CVE-2002-0525  
Status
Candidate  
Description
Format string vulnerabilities in (1) inews or (2) rnews for INN 2.2.3 and earlier allow local users and remote malicious NNTP servers to gain privileges via format string specifiers in NTTP responses.  
Phase
Proposed (20020611)  
Votes
ACCEPT(3) Cole, Cox, Frech | NOOP(2) Foat, Wall | REVIEWING(1) Christey  
Comments
Christey> CALDERA:CSSA-2002-038.0 | CHANGE> [Cox changed vote from REVIEWING to ACCEPT] | CHANGE> [Christey changed vote from NOOP to REVIEWING] | Christey> Need to consult with Caldera on this.