Description
fetchnews in leafnode 1.9.47 and earlier allows remote attackers to cause a denial of service (process hang) via an empty NNTP news article with missing mandatory headers.
References
- 3441 vdb-entry
- leafnode-fetchnews-nntp-dos(14189) vdb-entry
- 10590 third-party-advisory
- 20040109 leafnode -1.9.47 security announcement SA-2004-01 mailing-list
- http://leafnode.sourceforge.net/leafnode-SA-2004-01.txt