Back to Database
Status published
Medium
CVE-2002-1661
The leafnode server in leafnode 1.9.20 to 1.9.29 allows remote...
Vulnerability Description
The leafnode server in leafnode 1.9.20 to 1.9.29 allows remote attackers to cause a denial of service (infinite loop) when leafnode requests a cross-posted article to one group whose name is a prefix of another group.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2002-1661
Credits & Attribution
No credits recorded in the NVD database.
References
- http://www.securitytracker.com/id?1005865
- http://secunia.com/advisories/7801
- http://secunia.com/advisories/7870
- http://leafnode.sourceforge.net/leafnode-SA-2002-01.txt
- http://marc.info/?l=bugtraq&m=104127108823436&w=2
- http://marc.info/?l=bugtraq&m=104152295210075&w=2
- https://exchange.xforce.ibmcloud.com/vulnerabilities/10942
- http://secunia.com/advisories/7799
- http://www.securityfocus.com/bid/6490
- http://www.mandriva.com/security/advisories?name=MDKSA-2003:005
More from leafnode
View All →CVE-2005-1911
The fetchnews NNTP client in leafnode 1.11.2 and earlier can...
Medium
5
CVE-2005-1453
fetchnews in leafnode 1.9.48 to 1.11.1 allows remote NNTP servers...
Medium
5
CVE-2004-2068
fetchnews in leafnode 1.9.47 and earlier allows remote attackers to...
Medium
5
CVE-2003-0744
The fetchnews NNTP client in leafnode 1.9.3 to 1.9.41 allows...
Medium
5
Affected Vendor
leafnode
View all reports →Affected Software
leafnode
Vulnerable Versions:
1.9.19, 1.9.20, 1.9.21, 1.9.22, 1.9.23, 1.9.24, 1.9.25, 1.9.26, 1.9.27, 1.9.29
Timeline
Official Publish:
May 5th, 2005
Last Modified:
August 8th, 2024
Added to House:
July 18th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.