PatchTheCVEslrn development team vulnerabilities
Recent CVEs affecting slrn development team products. 2 tracked.
slrn development team has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2002-08-12. Highest priority: CVE-2002-0740 (score 49/100).
- CVE-2002-0740 HIGH 7.2 DOWNGRADE Buffer overflow in slrnpull for the SLRN package, when installed setuid or setgid, allows local users to gain
- CVE-2001-1035 HIGH 7.5 UPGRADE Binary decoding feature of slrn 0.9 and earlier allows remote attackers to execute commands via shell scripts
FAQ
How do I fix slrn development team vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is slrn development team being exploited right now?
None of the tracked slrn development team CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which slrn development team CVE should I patch first?
CVE-2002-0740 currently ranks highest (49/100): Buffer overflow in slrnpull for the SLRN package, when installed setuid or setgid, allows local users to gain .