Lucene search

MitreCVE-2006-5867

HistoryJan 09, 2007 - 12:00 a.m.

CVE-2006-5867

2007-01-0900:00:00

CWE-20

mitre

web.nvd.nist.gov

cve-2006-5867

fetchmail

tls

cleartext passwords

man-in-the-middle attack

nvd

CVSS2

7.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:C/I:N/A:N

AI Score

5.7

Confidence

Low

EPSS

0.131

Percentile

95.6%

JSON

fetchmail before 6.3.6-rc4 does not properly enforce TLS and may transmit cleartext passwords over unsecured links if certain circumstances occur, which allows remote attackers to obtain sensitive information via man-in-the-middle (MITM) attacks.

Affected configurations

Nvd

Node

fetchmailfetchmailRange≤6.3.6rc3

fetchmailfetchmailMatch4.5.1

fetchmailfetchmailMatch4.5.2

fetchmailfetchmailMatch4.5.3

fetchmailfetchmailMatch4.5.4

fetchmailfetchmailMatch4.5.5

fetchmailfetchmailMatch4.5.6

fetchmailfetchmailMatch4.5.7

fetchmailfetchmailMatch4.5.8

fetchmailfetchmailMatch4.6.0

fetchmailfetchmailMatch4.6.1

fetchmailfetchmailMatch4.6.2

fetchmailfetchmailMatch4.6.3

fetchmailfetchmailMatch4.6.4

fetchmailfetchmailMatch4.6.5

fetchmailfetchmailMatch4.6.6

fetchmailfetchmailMatch4.6.7

fetchmailfetchmailMatch4.6.8

fetchmailfetchmailMatch4.6.9

fetchmailfetchmailMatch4.7.0

fetchmailfetchmailMatch4.7.1

fetchmailfetchmailMatch4.7.2

fetchmailfetchmailMatch4.7.3

fetchmailfetchmailMatch4.7.4

fetchmailfetchmailMatch4.7.5

fetchmailfetchmailMatch4.7.6

fetchmailfetchmailMatch4.7.7

fetchmailfetchmailMatch5.0.0

fetchmailfetchmailMatch5.0.1

fetchmailfetchmailMatch5.0.2

fetchmailfetchmailMatch5.0.3

fetchmailfetchmailMatch5.0.4

fetchmailfetchmailMatch5.0.5

fetchmailfetchmailMatch5.0.6

fetchmailfetchmailMatch5.0.7

fetchmailfetchmailMatch5.0.8

fetchmailfetchmailMatch5.1.0

fetchmailfetchmailMatch5.1.4

fetchmailfetchmailMatch5.2.0

fetchmailfetchmailMatch5.2.1

fetchmailfetchmailMatch5.2.3

fetchmailfetchmailMatch5.2.4

fetchmailfetchmailMatch5.2.7

fetchmailfetchmailMatch5.2.8

fetchmailfetchmailMatch5.3.0

fetchmailfetchmailMatch5.3.1

fetchmailfetchmailMatch5.3.3

fetchmailfetchmailMatch5.3.8

fetchmailfetchmailMatch5.4.0

fetchmailfetchmailMatch5.4.3

fetchmailfetchmailMatch5.4.4

fetchmailfetchmailMatch5.4.5

fetchmailfetchmailMatch5.5.0

fetchmailfetchmailMatch5.5.2

fetchmailfetchmailMatch5.5.3

fetchmailfetchmailMatch5.5.5

fetchmailfetchmailMatch5.5.6

fetchmailfetchmailMatch5.6.0

fetchmailfetchmailMatch5.7.0

fetchmailfetchmailMatch5.7.2

fetchmailfetchmailMatch5.7.4

fetchmailfetchmailMatch5.8

fetchmailfetchmailMatch5.8.1

fetchmailfetchmailMatch5.8.2

fetchmailfetchmailMatch5.8.3

fetchmailfetchmailMatch5.8.4

fetchmailfetchmailMatch5.8.5

fetchmailfetchmailMatch5.8.6

fetchmailfetchmailMatch5.8.11

fetchmailfetchmailMatch5.8.13

fetchmailfetchmailMatch5.8.14

fetchmailfetchmailMatch5.8.17

fetchmailfetchmailMatch5.9.0

fetchmailfetchmailMatch5.9.4

fetchmailfetchmailMatch5.9.5

fetchmailfetchmailMatch5.9.8

fetchmailfetchmailMatch5.9.10

fetchmailfetchmailMatch5.9.11

fetchmailfetchmailMatch5.9.13

fetchmailfetchmailMatch6.0.0

fetchmailfetchmailMatch6.1.0

fetchmailfetchmailMatch6.1.3

fetchmailfetchmailMatch6.2.0

fetchmailfetchmailMatch6.2.1

fetchmailfetchmailMatch6.2.2

fetchmailfetchmailMatch6.2.3

fetchmailfetchmailMatch6.2.4

fetchmailfetchmailMatch6.2.5

fetchmailfetchmailMatch6.2.5.1

fetchmailfetchmailMatch6.2.5.2

fetchmailfetchmailMatch6.2.5.4

fetchmailfetchmailMatch6.2.6pre4

fetchmailfetchmailMatch6.2.6pre8

fetchmailfetchmailMatch6.2.6pre9

fetchmailfetchmailMatch6.2.9rc10

fetchmailfetchmailMatch6.2.9rc3

fetchmailfetchmailMatch6.2.9rc4

fetchmailfetchmailMatch6.2.9rc5

fetchmailfetchmailMatch6.2.9rc7

fetchmailfetchmailMatch6.2.9rc8

fetchmailfetchmailMatch6.2.9rc9

fetchmailfetchmailMatch6.3.0

fetchmailfetchmailMatch6.3.1

fetchmailfetchmailMatch6.3.2

fetchmailfetchmailMatch6.3.3

fetchmailfetchmailMatch6.3.4

fetchmailfetchmailMatch6.3.5

fetchmailfetchmailMatch6.3.6rc1

fetchmailfetchmailMatch6.3.6rc2

VendorProductVersionCPE
fetchmailfetchmail*cpe:2.3:a:fetchmail:fetchmail:*:rc3:*:*:*:*:*:*
fetchmailfetchmail4.5.1cpe:2.3:a:fetchmail:fetchmail:4.5.1:*:*:*:*:*:*:*
fetchmailfetchmail4.5.2cpe:2.3:a:fetchmail:fetchmail:4.5.2:*:*:*:*:*:*:*
fetchmailfetchmail4.5.3cpe:2.3:a:fetchmail:fetchmail:4.5.3:*:*:*:*:*:*:*
fetchmailfetchmail4.5.4cpe:2.3:a:fetchmail:fetchmail:4.5.4:*:*:*:*:*:*:*
fetchmailfetchmail4.5.5cpe:2.3:a:fetchmail:fetchmail:4.5.5:*:*:*:*:*:*:*
fetchmailfetchmail4.5.6cpe:2.3:a:fetchmail:fetchmail:4.5.6:*:*:*:*:*:*:*
fetchmailfetchmail4.5.7cpe:2.3:a:fetchmail:fetchmail:4.5.7:*:*:*:*:*:*:*
fetchmailfetchmail4.5.8cpe:2.3:a:fetchmail:fetchmail:4.5.8:*:*:*:*:*:*:*
fetchmailfetchmail4.6.0cpe:2.3:a:fetchmail:fetchmail:4.6.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
fetchmail	fetchmail	*	cpe:2.3:a:fetchmail:fetchmail::rc3::::::*
fetchmail	fetchmail	4.5.1	cpe:2.3:a:fetchmail:fetchmail:4.5.1:::::::*
fetchmail	fetchmail	4.5.2	cpe:2.3:a:fetchmail:fetchmail:4.5.2:::::::*
fetchmail	fetchmail	4.5.3	cpe:2.3:a:fetchmail:fetchmail:4.5.3:::::::*
fetchmail	fetchmail	4.5.4	cpe:2.3:a:fetchmail:fetchmail:4.5.4:::::::*
fetchmail	fetchmail	4.5.5	cpe:2.3:a:fetchmail:fetchmail:4.5.5:::::::*
fetchmail	fetchmail	4.5.6	cpe:2.3:a:fetchmail:fetchmail:4.5.6:::::::*
fetchmail	fetchmail	4.5.7	cpe:2.3:a:fetchmail:fetchmail:4.5.7:::::::*
fetchmail	fetchmail	4.5.8	cpe:2.3:a:fetchmail:fetchmail:4.5.8:::::::*
fetchmail	fetchmail	4.6.0	cpe:2.3:a:fetchmail:fetchmail:4.6.0:::::::*