Lucene search

K
freebsdFreeBSD45500F74-5947-11DC-87C1-000E2E5785AD
HistoryJul 29, 2007 - 12:00 a.m.

fetchmail -- denial of service on reject of local warning message

2007-07-2900:00:00
vuxml.freebsd.org
17

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.026 Low

EPSS

Percentile

90.2%

Matthias Andree reports:

fetchmail will generate warning messages in certain
circumstances (for instance, when leaving oversized messages
on the server or login to the upstream fails) and send them
to the local postmaster or the user running it.
If this warning message is then refused by the SMTP listener
that fetchmail is forwarding the message to, fetchmail
crashes and does not collect further messages until it is
restarted.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchfetchmail=Β 4.6.8UNKNOWN
FreeBSDanynoarchfetchmail<Β 6.3.8_4UNKNOWN

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.026 Low

EPSS

Percentile

90.2%