CVE-2002-1788

CVE-2002-1788 describes a format string vulnerability in the nn_exitmsg function of the 'nn' newsreader, versions 6.6.0 through 6.6.3. This flaw allows remote NNTP servers to execute arbitrary code on affected systems by injecting malicious format strings into server responses. With a CVSS score of 7.5, it is considered highly severe due to its network-based attack vector, low attack complexity, and potential for complete compromise of confidentiality, integrity, and availability. While there is no evidence of active exploitation or public exploit code, the vulnerability has garnered significant community discussion, indicating awareness among security researchers.