CVE-2006-0321
6.5 Medium
AI Score
Confidence
Low
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
0.05 Low
EPSS
Percentile
92.8%
fetchmail 6.3.0 and other versions before 6.3.2 allows remote attackers to cause a denial of service (crash) via crafted e-mail messages that cause a free of an invalid pointer when fetchmail bounces the message to the originator or local postmaster.
| CPE | Name | Operator | Version |
|---|---|---|---|
| fetchmail:fetchmail | fetchmail | eq | 6.3.0 |
| fetchmail:fetchmail | fetchmail | eq | 6.3.1 |
References
bugs.debian.org/cgi-bin/bugreport.cgi?bug=348747
developer.berlios.de/project/shownotes.php?release_id=8784
fetchmail.berlios.de/fetchmail-SA-2006-01.txt
lists.apple.com/archives/security-announce/2006//Aug/msg00000.html
secunia.com/advisories/18571
secunia.com/advisories/18895
secunia.com/advisories/21253
securitytracker.com/id?1015527
slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.443499
www.osvdb.org/22691
www.securityfocus.com/archive/1/422936/100/0/threaded
www.securityfocus.com/bid/16365
www.securityfocus.com/bid/19289
www.us-cert.gov/cas/techalerts/TA06-214A.html
www.vupen.com/english/advisories/2006/0300
www.vupen.com/english/advisories/2006/3101
exchange.xforce.ibmcloud.com/vulnerabilities/24265
Related
6.5 Medium
AI Score
Confidence
Low
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
0.05 Low
EPSS
Percentile
92.8%