Command execution via shell metachars in INN daemon (innd) 1.5 using "newgroup" and "rmgroup" control messages, and others.
1996-12-04T05:00:00.000
2025-04-03T01:03:51.193
Deferred
CVSSv3.1: 9.8 (CRITICAL)
AV:N/AC:L/Au:N/C:C/I:C/A:C
10.0
10.0
| Type | Vendor | Product | Version/Range | Vulnerable? |
|---|---|---|---|---|
| Application | isc | inn | 1.4sec | Yes |
| Application | isc | inn | 1.4sec2 | Yes |
| Application | isc | inn | 1.4unoff3 | Yes |
| Application | isc | inn | 1.4unoff4 | Yes |
| Application | isc | inn | 1.5 | Yes |
| Application | netscape | news_server | 1.1 | Yes |
| Operating System | bsdi | bsd_os | 2.1 | Yes |
| Operating System | caldera | openlinux | 1.0 | Yes |
| Operating System | redhat | linux | 4.0 | Yes |
| Operating System | redhat | linux | 4.1 | Yes |
| Hardware | nec | goah_intrasv | 1.1 | Yes |
| Hardware | nec | goah_networksv | 1.2 | Yes |
| Hardware | nec | goah_networksv | 2.2 | Yes |
| Hardware | nec | goah_networksv | 3.1 | Yes |