Vulnerability in Newsx

CVE-2002-1789

Format string vulnerability in newsx NNTP client before 1.4.8 allows local users to execute arbitrary code via format string specifiers that are not properly handled in a call to the syslog function.

EPSS: 0.004 (34.6th percentile) — read the EPSS interpretation.

Affected products

  • Newsx — versions 1.4_pl6
  • N/a — versions n/a

References