Command execution via shell metachars in INN daemon (innd) 1.5 using newgroup and rmgroup control messages, and others.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Inn | Isc | 1.4sec (including) | 1.4sec (including) |
| Inn | Isc | 1.4sec2 (including) | 1.4sec2 (including) |
| Inn | Isc | 1.4unoff3 (including) | 1.4unoff3 (including) |
| Inn | Isc | 1.4unoff4 (including) | 1.4unoff4 (including) |
| Inn | Isc | 1.5 (including) | 1.5 (including) |
| News_server | Netscape | 1.1 (including) | 1.1 (including) |