CVE-2006-5974

2007-01-0900:00:00

CWE-20

mitre

web.nvd.nist.gov

fetchmail

denial of service

cve-2006-5974

security issue

remote attack

CVSS2

7.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

AI Score

6.2

Confidence

Low

EPSS

0.11

Percentile

95.2%

JSON

fetchmail 6.3.5 and 6.3.6 before 6.3.6-rc4, when refusing a message delivered via the mda option, allows remote attackers to cause a denial of service (crash) via unknown vectors that trigger a NULL pointer dereference when calling the (1) ferror or (2) fflush functions.

Affected configurations

Nvd

Node

fetchmailfetchmailMatch6.3.5

fetchmailfetchmailMatch6.3.6rc1

fetchmailfetchmailMatch6.3.6rc2

fetchmailfetchmailMatch6.3.6rc3

VendorProductVersionCPE
fetchmailfetchmail6.3.5cpe:2.3:a:fetchmail:fetchmail:6.3.5:*:*:*:*:*:*:*
fetchmailfetchmail6.3.6cpe:2.3:a:fetchmail:fetchmail:6.3.6:rc1:*:*:*:*:*:*
fetchmailfetchmail6.3.6cpe:2.3:a:fetchmail:fetchmail:6.3.6:rc2:*:*:*:*:*:*
fetchmailfetchmail6.3.6cpe:2.3:a:fetchmail:fetchmail:6.3.6:rc3:*:*:*:*:*:*

Vendor	Product	Version	CPE
fetchmail	fetchmail	6.3.5	cpe:2.3:a:fetchmail:fetchmail:6.3.5:::::::*
fetchmail	fetchmail	6.3.6	cpe:2.3:a:fetchmail:fetchmail:6.3.6:rc1::::::
fetchmail	fetchmail	6.3.6	cpe:2.3:a:fetchmail:fetchmail:6.3.6:rc2::::::
fetchmail	fetchmail	6.3.6	cpe:2.3:a:fetchmail:fetchmail:6.3.6:rc3::::::