National Vulnerability Database (CVE-2000-0472)

National Cyber-Alert System Vulnerability Summary: CVE-2000-0472
Orirignal release date: 2000-02-06 Source: US-CERT/NIST ### Overview Buffer overflow in innd 2.2.2 allows remote attackers to execute arbitrary commands via a cancel request containing a long message ID. ### Impact CVSS Severity: 4.7 (Medium) Range: local Authentication: input buffer="1" Impact Type: conf,int ### Reference to Advisories, Solutions, and Tools External Source: CERT Name: CERT* Advisory CA-97.08 Hyperlink: http://www.cert.org/advisories/CA-97.08.innd.html External Source: ISS X-Force Name: innd-cancel-overflow Hyperlink: http://xforce.iss.net/static/4615.php External Source: Security Focus Name: innd 2.2.2 remote buffer overflow Hyperlink: http://www.securityfocus.com/frames/?content=/templates/archive.pike%3Flist%3D1%26msg%3DPine.LNX.4.10.10006061557230.30518-100000@squirrel.tpi.pl ### Vulnerable Software and Vendor INN (ISC) Technical Details CVE Standard Vulnerability Entry: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2000-0472