← Vulnerability feed

Vulnerability record · CVE-2005-0101 · published 1 February 2005

CVE-2005-0101: Newspost vulnerability

Newspost · Newspost

Buffer overflow in the socket_getline function in Newspost 2.1.1 and earlier allows remote malicious NNTP servers to execute arbitrary code via a long string without a newline character.

7.5 CVSS 2.0 High EPSS 16% · top 3.2%
7.5CVSS 2.0 base score
16%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
18References, 2 tagged exploit
16 Jun 2026Last modified by NVD

Description

Buffer overflow in the socket_getline function in Newspost 2.1.1 and earlier allows remote malicious NNTP servers to execute arbitrary code via a long string without a newline character.

AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://marc.info/?l=bugtraq&m=110746336728781&w=2
http://people.freebsd.org/~niels/issues/newspost-20050114.txt ExploitVendor Advisory
http://secunia.com/advisories/14092/ Vendor Advisory
http://secunia.com/advisories/14098
http://security.gentoo.org/glsa/glsa-200502-05.xml PatchVendor Advisory
http://securitytracker.com/id?1013056
http://www.securityfocus.com/bid/12418
http://www.vuxml.org/freebsd/7f13607b-6948-11d9-8937-00065be4b5b6.html Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/19178
http://marc.info/?l=bugtraq&m=110746336728781&w=2
http://people.freebsd.org/~niels/issues/newspost-20050114.txt ExploitVendor Advisory
http://secunia.com/advisories/14092/ Vendor Advisory
http://secunia.com/advisories/14098
http://security.gentoo.org/glsa/glsa-200502-05.xml PatchVendor Advisory
http://securitytracker.com/id?1013056
http://www.securityfocus.com/bid/12418
http://www.vuxml.org/freebsd/7f13607b-6948-11d9-8937-00065be4b5b6.html Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/19178

Track CVE-2005-0101 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Source: NIST National Vulnerability Database (record CVE-2005-0101), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.