Lucene search
RedhatCVE-2012-3482HistoryDec 21, 2012 - 5:46 a.m.
CVE-2012-3482
2012-12-2105:46:16
redhat
web.nvd.nist.gov
42
cve
fetchmail
ntlm
auth
vulnerabilities
security
nvd
CVSS2
5.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:N/A:P
AI Score
6.5
Confidence
Low
EPSS
0.007
Percentile
79.7%
Fetchmail 5.0.8 through 6.3.21, when using NTLM authentication in debug mode, allows remote NTLM servers to (1) cause a denial of service (crash and delayed delivery of inbound mail) via a crafted NTLM response that triggers an out-of-bounds read in the base64 decoder, or (2) obtain sensitive information from memory via an NTLM Type 2 message with a crafted Target Name structure, which triggers an out-of-bounds read.
Affected configurations
Node
fetchmailfetchmailMatch5.0.8
ORfetchmailfetchmailMatch5.1.0
ORfetchmailfetchmailMatch5.1.4
ORfetchmailfetchmailMatch5.2.0
ORfetchmailfetchmailMatch5.2.1
ORfetchmailfetchmailMatch5.2.3
ORfetchmailfetchmailMatch5.2.4
ORfetchmailfetchmailMatch5.2.7
ORfetchmailfetchmailMatch5.2.8
ORfetchmailfetchmailMatch5.3.0
ORfetchmailfetchmailMatch5.3.1
ORfetchmailfetchmailMatch5.3.3
ORfetchmailfetchmailMatch5.3.8
ORfetchmailfetchmailMatch5.4.0
ORfetchmailfetchmailMatch5.4.3
ORfetchmailfetchmailMatch5.4.4
ORfetchmailfetchmailMatch5.4.5
ORfetchmailfetchmailMatch5.5.0
ORfetchmailfetchmailMatch5.5.2
ORfetchmailfetchmailMatch5.5.3
ORfetchmailfetchmailMatch5.5.5
ORfetchmailfetchmailMatch5.5.6
ORfetchmailfetchmailMatch5.6.0
ORfetchmailfetchmailMatch5.7.0
ORfetchmailfetchmailMatch5.7.2
ORfetchmailfetchmailMatch5.7.4
ORfetchmailfetchmailMatch5.8
ORfetchmailfetchmailMatch5.8.1
ORfetchmailfetchmailMatch5.8.2
ORfetchmailfetchmailMatch5.8.3
ORfetchmailfetchmailMatch5.8.4
ORfetchmailfetchmailMatch5.8.5
ORfetchmailfetchmailMatch5.8.6
ORfetchmailfetchmailMatch5.8.11
ORfetchmailfetchmailMatch5.8.13
ORfetchmailfetchmailMatch5.8.14
ORfetchmailfetchmailMatch5.8.17
ORfetchmailfetchmailMatch5.9.0
ORfetchmailfetchmailMatch5.9.4
ORfetchmailfetchmailMatch5.9.5
ORfetchmailfetchmailMatch5.9.8
ORfetchmailfetchmailMatch5.9.10
ORfetchmailfetchmailMatch5.9.11
ORfetchmailfetchmailMatch5.9.13
ORfetchmailfetchmailMatch6.0.0
ORfetchmailfetchmailMatch6.1.0
ORfetchmailfetchmailMatch6.1.3
ORfetchmailfetchmailMatch6.2.0
ORfetchmailfetchmailMatch6.2.1
ORfetchmailfetchmailMatch6.2.2
ORfetchmailfetchmailMatch6.2.3
ORfetchmailfetchmailMatch6.2.4
ORfetchmailfetchmailMatch6.2.5
ORfetchmailfetchmailMatch6.2.5.1
ORfetchmailfetchmailMatch6.2.5.2
ORfetchmailfetchmailMatch6.2.5.4
ORfetchmailfetchmailMatch6.2.6pre4
ORfetchmailfetchmailMatch6.2.6pre8
ORfetchmailfetchmailMatch6.2.6pre9
ORfetchmailfetchmailMatch6.2.9rc10
ORfetchmailfetchmailMatch6.2.9rc3
ORfetchmailfetchmailMatch6.2.9rc4
ORfetchmailfetchmailMatch6.2.9rc5
ORfetchmailfetchmailMatch6.2.9rc7
ORfetchmailfetchmailMatch6.2.9rc8
ORfetchmailfetchmailMatch6.2.9rc9
ORfetchmailfetchmailMatch6.3.0
ORfetchmailfetchmailMatch6.3.1
ORfetchmailfetchmailMatch6.3.2
ORfetchmailfetchmailMatch6.3.3
ORfetchmailfetchmailMatch6.3.4
ORfetchmailfetchmailMatch6.3.5
ORfetchmailfetchmailMatch6.3.6
ORfetchmailfetchmailMatch6.3.6rc1
ORfetchmailfetchmailMatch6.3.6rc2
ORfetchmailfetchmailMatch6.3.6rc3
ORfetchmailfetchmailMatch6.3.6rc4
ORfetchmailfetchmailMatch6.3.6rc5
ORfetchmailfetchmailMatch6.3.7
ORfetchmailfetchmailMatch6.3.8
ORfetchmailfetchmailMatch6.3.9
ORfetchmailfetchmailMatch6.3.9rc2
ORfetchmailfetchmailMatch6.3.10
ORfetchmailfetchmailMatch6.3.11
ORfetchmailfetchmailMatch6.3.12
ORfetchmailfetchmailMatch6.3.13
ORfetchmailfetchmailMatch6.3.14
ORfetchmailfetchmailMatch6.3.15
ORfetchmailfetchmailMatch6.3.16
ORfetchmailfetchmailMatch6.3.17
ORfetchmailfetchmailMatch6.3.18
ORfetchmailfetchmailMatch6.3.19
ORfetchmailfetchmailMatch6.3.21
| Vendor | Product | Version | CPE |
|---|---|---|---|
| fetchmail | fetchmail | 5.0.8 | cpe:2.3:a:fetchmail:fetchmail:5.0.8:*:*:*:*:*:*:* |
| fetchmail | fetchmail | 5.1.0 | cpe:2.3:a:fetchmail:fetchmail:5.1.0:*:*:*:*:*:*:* |
| fetchmail | fetchmail | 5.1.4 | cpe:2.3:a:fetchmail:fetchmail:5.1.4:*:*:*:*:*:*:* |
| fetchmail | fetchmail | 5.2.0 | cpe:2.3:a:fetchmail:fetchmail:5.2.0:*:*:*:*:*:*:* |
| fetchmail | fetchmail | 5.2.1 | cpe:2.3:a:fetchmail:fetchmail:5.2.1:*:*:*:*:*:*:* |
| fetchmail | fetchmail | 5.2.3 | cpe:2.3:a:fetchmail:fetchmail:5.2.3:*:*:*:*:*:*:* |
| fetchmail | fetchmail | 5.2.4 | cpe:2.3:a:fetchmail:fetchmail:5.2.4:*:*:*:*:*:*:* |
| fetchmail | fetchmail | 5.2.7 | cpe:2.3:a:fetchmail:fetchmail:5.2.7:*:*:*:*:*:*:* |
| fetchmail | fetchmail | 5.2.8 | cpe:2.3:a:fetchmail:fetchmail:5.2.8:*:*:*:*:*:*:* |
| fetchmail | fetchmail | 5.3.0 | cpe:2.3:a:fetchmail:fetchmail:5.3.0:*:*:*:*:*:*:* |
References
lists.fedoraproject.org/pipermail/package-announce/2012-October/088836.html
lists.fedoraproject.org/pipermail/package-announce/2012-October/088871.html
seclists.org/oss-sec/2012/q3/230
seclists.org/oss-sec/2012/q3/232
www.fetchmail.info/fetchmail-SA-2012-02.txt
www.securityfocus.com/bid/54987
blogs.oracle.com/sunsecurity/entry/multiple_vulnerabilities_in_fetchmail
Related
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2016:0872-1)
2021-06-09 00:00:00
Amazon Linux: Security Advisory (ALAS-2012-132)
2015-09-08 00:00:00
Fedora Update for fetchmail FEDORA-2012-14462
2012-10-03 00:00:00
nessus
nessus
Amazon Linux AMI : fetchmail (ALAS-2012-132)
2013-09-04 00:00:00
Fedora 17 : fetchmail-6.3.22-1.fc17 (2012-14451)
2012-10-03 00:00:00
SUSE SLED11 / SLES11 Security Update : fetchmail (SUSE-SU-2016:0872-1)
2016-03-25 00:00:00
ubuntucve
ubuntucve
CVE-2012-3482
2012-12-21 00:00:00
freebsd
freebsd
fetchmail -- two vulnerabilities in NTLM authentication
2012-08-12 00:00:00
cvelist
cvelist
CVE-2012-3482
2012-12-21 02:00:00
fedora
fedora
[SECURITY] Fedora 16 Update: fetchmail-6.3.22-1.fc16
2012-10-02 15:52:03
[SECURITY] Fedora 17 Update: fetchmail-6.3.22-1.fc17
2012-10-02 15:57:24
prion
prion
Out-of-bounds
2012-12-21 05:46:00
debiancve
debiancve
CVE-2012-3482
2012-12-21 05:46:16
nvd
nvd
CVE-2012-3482
2012-12-21 05:46:16
amazon
amazon
Low: fetchmail
2012-10-08 10:41:00
osv
osv
fetchmail-6.3.26-13.4 on GA media
2024-06-15 00:00:00
CVSS2
5.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:N/A:P
AI Score
6.5
Confidence
Low
EPSS
0.007
Percentile
79.7%
Related for CVE-2012-3482