Description
The leafnode server in leafnode 1.9.20 to 1.9.29 allows remote attackers to cause a denial of service (infinite loop) when leafnode requests a cross-posted article to one group whose name is a prefix of another group.
References
- 1005865 vdb-entry
- 7801 third-party-advisory
- 7870 third-party-advisory
- http://leafnode.sourceforge.net/leafnode-SA-2002-01.txt
- 20021229 Leafnode security announcement SA:2002:01 mailing-list
- 20030102 GLSA: leafnode mailing-list
- leafnode-nntp-dos(10942) vdb-entry
- 7799 third-party-advisory
- 6490 vdb-entry
- MDKSA-2003:005 vendor-advisory