Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2012-11-11	CVE-2012-3523	Permissions, Privileges, and Access Controls vulnerability in ISC INN The STARTTLS implementation in nnrpd in INN before 2.5.3 does not properly restrict I/O buffering, which allows man-in-the-middle attackers to insert commands into encrypted sessions by sending a cleartext command that is processed after TLS is in place, related to a "plaintext command injection" attack, a similar issue to CVE-2011-0411. network isc CWE-264	6.8
2001-04-21	CVE-2001-1442	Buffer Overflow vulnerability in innfeed Command-Line Buffer overflow in innfeed for ISC InterNetNews (INN) before 2.3.0 allows local users in the "news" group to gain privileges via a long -c command line argument. local low complexity isc	4.6
2000-10-20	CVE-2000-0360	Unspecified vulnerability in ISC INN Buffer overflow in INN 2.2.1 and earlier allows remote attackers to cause a denial of service via a maliciously formatted article. network low complexity isc	5.0