CVE-2001-0441: Debian Linux

High severity, CVSS 7.5. EPSS: 2.7% chance of exploitation in the next 30 days.

Buffer overflow in (1) wrapping and (2) unwrapping functions of slrn news reader before 0.9.7.0 allows remote attackers to execute arbitrary commands via a long message header.

Affected products

• Debian Debian Linux: up to and including 2.2
• Mandrakesoft Mandrake Linux: version 6.0 only; version 6.1 only; version 7.0 only; version 7.1 only; version 7.2 only
• Mandrakesoft Mandrake Linux Corporate Server: version 1.0.1 only
• Red Hat Linux: version 6.2 only; version 7.0 only

Published 2001-06-27. Last modified 2026-06-16.