Description
Buffer overflow in (1) wrapping and (2) unwrapping functions of slrn news reader before 0.9.7.0 allows remote attackers to execute arbitrary commands via a long message header.
References
- CLA-2001:383 vendor-advisory
- slrn-wrapping-bo(6213) vdb-entry
- MDKSA-2001:028 vendor-advisory
- 20010316 Immunix OS Security update for slrn mailing-list
- 2493 vdb-entry
- DSA-040 vendor-advisory
- RHSA-2001:028 vendor-advisory
- FreeBSD-SA-01:37 vendor-advisory