The remote web server contains a CGI script that suffers from a buffer overflow vulnerability. Description : The remote host appears to be running WebNews, which offers web-based access to Usenet news. Some versions of WebNews are prone to a buffer overflow when processing a query string with an overly-long group parameter. An attacker may be able to leverage this issue to execute arbitrary shell code on the remote host subject to the permissions of the web server user id.

Apply the patch made released by the vendor on February 14th, 2002 if running Webnews 1.1 or older.

• http://archives.neohapsis.com/archives/bugtraq/2002-02/0186.html

---

Updated on 2015-03-25