Quick answers
- Is CVE-1999-0247 exploited in the wild?
- No. Junglewise Threat Intelligence has no report of CVE-1999-0247 being exploited in the wild.
- How severe is CVE-1999-0247?
- High severity, with a CVSS score of 7.5, published 21 July 1997.
- Which products and versions are affected?
- Isc InterNetNews Up to 1.6.
- Is there a fix for CVE-1999-0247?
- No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
- How is CVE-1999-0247 attacked?
- It is attacked over the network, in an operating system.
- Am I affected by CVE-1999-0247?
- Check whether you run Isc InterNetNews at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.
Technical details
A classic buffer overflow vulnerability exists in the nnrpd (NetNews Remote Protocol Daemon) component of InterNetNews (INN) versions 1.6 and earlier. The flaw is triggered during the handling of client requests, where insufficient bounds checking allows an attacker to overwrite memory. A remote, unauthenticated attacker can exploit this by sending specially crafted input to the NNTP service. Successful exploitation grants the attacker the ability to execute arbitrary code with the privileges of the nnrpd process, typically leading to full system access. Users are advised to upgrade to a patched version of INN.
Affected products
- ISC InterNetNews (INN) Up to 1.6
Timeline
- 1997-07-21: disclosed: Initial vulnerability publication