Slrn Development Team Slrn — known CVE vulnerabilities

Every CVE whose affected-product data names Slrn Development Team Slrn, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2001-1035 — CVSS 7.5 (high): Binary decoding feature of slrn 0.9 and earlier allows remote attackers to execute commands via shell scripts that are inserted into a news…
• CVE-2002-0740 — CVSS 7.2 (high): Buffer overflow in slrnpull for the SLRN package, when installed setuid or setgid, allows local users to gain privileges via a long -d…