CVE-2002-1789: Newsx

High severity, CVSS 7.2. EPSS: 0.4% chance of exploitation in the next 30 days.

Format string vulnerability in newsx NNTP client before 1.4.8 allows local users to execute arbitrary code via format string specifiers that are not properly handled in a call to the syslog function.

Affected products

• Newsx Newsx: version 1.4_pl6 only

Published 2002-12-31. Last modified 2026-06-16.