fetchmail security update

2005-07-2510:17:03

CentOS Project

lists.centos.org

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.045 Low

EPSS

Percentile

92.5%

JSON

CentOS Errata and Security Advisory CESA-2005:640

Fetchmail is a remote mail retrieval and forwarding utility.

A buffer overflow was discovered in fetchmail’s POP3 client. A malicious
server could cause send a carefully crafted message UID and cause fetchmail
to crash or potentially execute arbitrary code as the user running
fetchmail. The Common Vulnerabilities and Exposures project assigned the
name CAN-2005-2335 to this issue.

Users of fetchmail should update to this erratum package which contains a
backported patch to correct this issue.

Affected packages:
fetchmail

Upstream details at:
https://access.redhat.com/errata/RHSA-2005:640

OSVersionArchitecturePackageVersionFilename
CentOS3i386fetchmail< 6.2.0-3.el3.2fetchmail-6.2.0-3.el3.2.i386.rpm
CentOS3x86_64fetchmail< 6.2.0-3.el3.2fetchmail-6.2.0-3.el3.2.x86_64.rpm
CentOS4i386fetchmail< 6.2.5-6.el4.2fetchmail-6.2.5-6.el4.2.i386.rpm
CentOS4x86_64fetchmail< 6.2.5-6.el4.2fetchmail-6.2.5-6.el4.2.x86_64.rpm
CentOS4ia64fetchmail< 6.2.5-6.el4.2fetchmail-6.2.5-6.el4.2.ia64.rpm
CentOS4s390fetchmail< 6.2.5-6.el4.2fetchmail-6.2.5-6.el4.2.s390.rpm
CentOS4s390xfetchmail< 6.2.5-6.el4.2fetchmail-6.2.5-6.el4.2.s390x.rpm
CentOS3ia64fetchmail< 6.2.0-3.el3.2fetchmail-6.2.0-3.el3.2.ia64.rpm
CentOS3s390fetchmail< 6.2.0-3.el3.2fetchmail-6.2.0-3.el3.2.s390.rpm
CentOS3s390xfetchmail< 6.2.0-3.el3.2fetchmail-6.2.0-3.el3.2.s390x.rpm

OS	Version	Architecture	Package	Version	Filename
CentOS	3	i386	fetchmail	< 6.2.0-3.el3.2	fetchmail-6.2.0-3.el3.2.i386.rpm
CentOS	3	x86_64	fetchmail	< 6.2.0-3.el3.2	fetchmail-6.2.0-3.el3.2.x86_64.rpm
CentOS	4	i386	fetchmail	< 6.2.5-6.el4.2	fetchmail-6.2.5-6.el4.2.i386.rpm
CentOS	4	x86_64	fetchmail	< 6.2.5-6.el4.2	fetchmail-6.2.5-6.el4.2.x86_64.rpm
CentOS	4	ia64	fetchmail	< 6.2.5-6.el4.2	fetchmail-6.2.5-6.el4.2.ia64.rpm
CentOS	4	s390	fetchmail	< 6.2.5-6.el4.2	fetchmail-6.2.5-6.el4.2.s390.rpm
CentOS	4	s390x	fetchmail	< 6.2.5-6.el4.2	fetchmail-6.2.5-6.el4.2.s390x.rpm
CentOS	3	ia64	fetchmail	< 6.2.0-3.el3.2	fetchmail-6.2.0-3.el3.2.ia64.rpm
CentOS	3	s390	fetchmail	< 6.2.0-3.el3.2	fetchmail-6.2.0-3.el3.2.s390.rpm
CentOS	3	s390x	fetchmail	< 6.2.0-3.el3.2	fetchmail-6.2.0-3.el3.2.s390x.rpm