Unscored severity · published Nov 11, 2012
CVE-2012-3523
The STARTTLS implementation in nnrpd in INN before 2.5.3 does not properly restrict I/O buffering, which allows man-in-the-middle attackers to insert commands into encrypted…
–
CVSS
3.2%
EPSS
No
On KEV
Description
The STARTTLS implementation in nnrpd in INN before 2.5.3 does not properly restrict I/O buffering, which allows man-in-the-middle attackers to insert commands into encrypted sessions by sending a cleartext command that is processed after TLS is in place, related to a "plaintext command injection" attack, a similar issue to CVE-2011-0411.
Exploitation
Is it being used?
Exploit prediction (EPSS)3.2% · higher than 88% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
IN
Inn · Isc
through 2.5.2; 1.4; 1.4sec; 1.4sec2; 1.4unoff3; 1.4unoff4; +11 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2012-3523
CVE.org
https://www.cve.org/CVERecord?id=CVE-2012-3523
lists.opensuse.org
http://lists.opensuse.org/opensuse-updates/2012-09/msg00058.html
secunia.com
http://secunia.com/advisories/50661
www.mandriva.com
http://www.mandriva.com/security/advisories?name=MDVSA-2012:156
More from Inn
9.8
CVE-1999-0043
Command execution via shell metachars in INN daemon (innd) 1.5 using "newgroup" and "rmgroup" control messages, and others
–
CVE-2004-0045
Buffer overflow in the ARTpost function in art.c in the control message handling code for INN 2.4.0 may allow remote attackers to execute arbitrary code
–
CVE-2002-0525
Format string vulnerabilities in (1) inews or (2) rnews for INN 2.2.3 and earlier allow local users and remote malicious NNTP servers to gain privileges via format string…
–
CVE-2001-1442
Buffer overflow in innfeed for ISC InterNetNews (INN) before 2.3.0 allows local users in the "news" group to gain privileges via a long -c command line argument
–
CVE-2000-0360
Buffer overflow in INN 2.2.1 and earlier allows remote attackers to cause a denial of service via a maliciously formatted article