Lucene search

K
freebsdFreeBSD09910D76-4C82-11DF-83FB-0015587E2CC1
HistoryApr 18, 2010 - 12:00 a.m.

fetchmail -- denial of service vulnerability

2010-04-1800:00:00
vuxml.freebsd.org
17

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

EPSS

0.012

Percentile

85.2%

Fetchmail developer Matthias Andree reported a vulnerability
that allows remote attackers to crash the application
when it is runs in verbose mode.

Fetchmail before release 6.3.17 did not properly
sanitize external input (mail headers and UID). When a
multi-character locale (such as UTF-8) was in use, this
could cause memory exhaustion and thus a denial of
service.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchfetchmail= 4.6.3UNKNOWN
FreeBSDanynoarchfetchmail<= 6.3.16UNKNOWN

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

EPSS

0.012

Percentile

85.2%