Vulnerability Details : CVE-2003-0744
The fetchnews NNTP client in leafnode 1.9.3 to 1.9.41 allows remote attackers to cause a denial of service (process hang and termination) via certain malformed Usenet news articles that cause fetchnews to hang while waiting for input.
Vulnerability category: Denial of service
Products affected by CVE-2003-0744
- cpe:2.3:a:leafnode:leafnode:1.9.25:*:*:*:*:*:*:*
- cpe:2.3:a:leafnode:leafnode:1.9.26:*:*:*:*:*:*:*
- cpe:2.3:a:leafnode:leafnode:1.9.21:*:*:*:*:*:*:*
- cpe:2.3:a:leafnode:leafnode:1.9.22:*:*:*:*:*:*:*
- cpe:2.3:a:leafnode:leafnode:1.9.23:*:*:*:*:*:*:*
- cpe:2.3:a:leafnode:leafnode:1.9.24:*:*:*:*:*:*:*
- cpe:2.3:a:leafnode:leafnode:1.9.19:*:*:*:*:*:*:*
- cpe:2.3:a:leafnode:leafnode:1.9.20:*:*:*:*:*:*:*
- cpe:2.3:a:leafnode:leafnode:1.9.27:*:*:*:*:*:*:*
- cpe:2.3:a:leafnode:leafnode:1.9.29:*:*:*:*:*:*:*
- cpe:2.3:a:leafnode:leafnode:1.9.36:*:*:*:*:*:*:*
- cpe:2.3:a:leafnode:leafnode:1.9.37:*:*:*:*:*:*:*
- cpe:2.3:a:leafnode:leafnode:1.9.30:*:*:*:*:*:*:*
- cpe:2.3:a:leafnode:leafnode:1.9.40:*:*:*:*:*:*:*
- cpe:2.3:a:leafnode:leafnode:1.9.41:*:*:*:*:*:*:*
- cpe:2.3:a:leafnode:leafnode:1.9.38:*:*:*:*:*:*:*
- cpe:2.3:a:leafnode:leafnode:1.9.39:*:*:*:*:*:*:*
- cpe:2.3:a:leafnode:leafnode:1.9.31:*:*:*:*:*:*:*
- cpe:2.3:a:leafnode:leafnode:1.9.35:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2003-0744
1.54%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 85 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2003-0744
Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
---|---|---|---|---|---|---|
5.0
|
MEDIUM | AV:N/AC:L/Au:N/C:N/I:N/A:P |
10.0
|
2.9
|
NIST |
References for CVE-2003-0744
-
http://www.securityfocus.com/bid/8541
-
http://marc.info/?l=bugtraq&m=106270038210736&w=2
'leafnode 1.9.3 - 1.9.41 security announcement SA-2003-01' - MARC
-
http://archives.neohapsis.com/archives/vulnwatch/2003-q3/
Vendor Advisory
-
http://leafnode.sourceforge.net/leafnode-SA-2003-01.txt
Jump to