CVE-2001-1442

Buffer overflow in innfeed for ISC InterNetNews (INN) before 2.3.0 allows local users in the ...

4.6 MediumPublic exploitFix available

Buffer overflow in innfeed for ISC InterNetNews (INN) before 2.3.0 allows local users in the "news" group to gain privileges via a long -c command line argument.

Exploit likelihood

1.89%Down 0.5 points since Feb 4, 2022

What each source reports

NVD Score used 4.6

Buffer overflow in innfeed for ISC InterNetNews (INN) before 2.3.0 allows local users in the "news" group to gain privileges via a long -c command line argument.

Record: CVE-2001-1442
CVSS 2.0: 4.6 MediumAV:L/AC:L/Au:N/C:P/I:P/A:P
Updated: 2026-11-02

CVE List No score

Buffer overflow in innfeed for ISC InterNetNews (INN) before 2.3.0 allows local users in the "news" group to gain privileges via a long -c command line argument.

Record: CVE-2001-1442
Updated: 2026-11-02

EUVDEUVD-2001-1422 No score

Buffer overflow in innfeed for ISC InterNetNews (INN) before 2.3.0 allows local users in the "news" group to gain privileges via a long -c command line argument.

Record: EUVD-2001-1422
Updated: 2026-11-03

GitHub AdvisoriesGHSA-wffw-62v7-rrv7 No score

Buffer overflow in innfeed for ISC InterNetNews (INN) before 2.3.0 allows local users in the ...

Buffer overflow in innfeed for ISC InterNetNews (INN) before 2.3.0 allows local users in the "news" group to gain privileges via a long -c command line argument.

Record: GHSA-wffw-62v7-rrv7
Updated: 2026-11-02

OSV No score

Buffer overflow in innfeed for ISC InterNetNews (INN) before 2.3.0 allows local users in the "news" group to gain privileges via a long -c command line argument.

Record: CVE-2001-1442
Updated: 2026-11-02

OSVDEBIAN-CVE-2001-1442 No score

Buffer overflow in innfeed for ISC InterNetNews (INN) before 2.3.0 allows local users in the "news" group to gain privileges via a long -c command line argument.

Record: DEBIAN-CVE-2001-1442
Updated: 2026-11-02

Affected products

isc inn

Affected packages

Affected packages
Package	Affected	Fixed
`inn2` Debian:12	before 2.3.3+20020922-1	2.3.3+20020922-1
`inn2` Debian:13	before 2.3.3+20020922-1	2.3.3+20020922-1
`inn2` Debian:14	before 2.3.3+20020922-1	2.3.3+20020922-1

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
Exploit-DB	ISC INN 2.x - Command-Line Buffer Overflow (1)	2001-04-18
Exploit-DB	ISC INN 2.x - Command-Line Buffer Overflow (2)	2001-04-18
PoC in GitHub	alt3kx/CVE-2001-1442	2018-05-14

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, Exploit-DB, GitHub Advisories, NVD, OSV, PoC in GitHub

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2001-1442 is a medium vulnerability (CVSS 4.6) in Isc Inn, published April 21, 2001. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 1.89%, the 79th percentile. Fixed in inn2 2.3.3+20020922-1.

Exploit likelihood

What each source reports

Affected products

Affected packages

Public exploits

History

In short

References