Summary
The remote host is missing an update to the system as announced in the referenced advisory.
Solution
Update your system with the appropriate patches or software upgrades.
http://leafnode.sourceforge.net/leafnode-SA-2005-01.txt http://www.frsirt.com/english/advisories/2005/0468 http://secunia.com/advisories/15252
http://sourceforge.net/mailarchive/forum.php?thread_id=7186974&forum_id=10210 http://article.gmane.org/gmane.network.leafnode.announce/52 http://www.dt.e-technik.uni-dortmund.de/pipermail/leafnode-list/2005q2/000900.html http://www.fredi.de/maillist/msg00111.html
http://archives.neohapsis.com/archives/vulnwatch/2005-q2/0037.html http://www.vuxml.org/freebsd/66dbb2ee-99b8-45b2-bb3e-640caea67a60.html
Insight
The following package is affected: leafnode
CVE-2005-1453
fetchnews in leafnode 1.9.48 to 1.11.1 allows remote NNTP servers to cause a denial of service (crash) by closing the connection while fetchnews is reading (1) an article header or (2) an article body, which also prevents fetchnews from querying other servers.
Severity
Classification
-
CVE CVE-2005-1453 -
CVSS Base Score: 5.0
AV:N/AC:L/Au:N/C:N/I:N/A:P
Related Vulnerabilities