Fedora Core 10 FEDORA-2009-8770 (fetchmail)
🗓️ 09 Sep 2009 00:00:00Reported by Copyright (C) 2009 E-Soft Inc.Type
openvas🔗 plugins.openvas.org👁 26 Views
| Reporter | Title | Published | Views | Family All 88 |
|---|---|---|---|---|
| fetchmail -- improper SSL certificate subject verification | 6 Aug 200900:00 | – | freebsd | |
| Mac OS X 10.6 < 10.6.2 Multiple Vulnerabilities | 10 Nov 200900:00 | – | nessus | |
| Mac OS X 10.6 < 10.6.2 Multiple Vulnerabilities | 10 Nov 200900:00 | – | nessus | |
| CentOS 3 / 4 / 5 : fetchmail (CESA-2009:1427) | 9 Sep 200900:00 | – | nessus | |
| Debian DSA-1852-1 : fetchmail - insufficient input validation | 24 Feb 201000:00 | – | nessus | |
| Fedora 10 : fetchmail-6.3.8-9.fc10 (2009-8770) | 4 Sep 200900:00 | – | nessus | |
| Fedora 11 : fetchmail-6.3.9-5.fc11 (2009-8780) | 4 Sep 200900:00 | – | nessus | |
| FreeBSD : fetchmail -- improper SSL certificate subject verification (5179d85c-8683-11de-91b9-0022157515b2) | 12 Aug 200900:00 | – | nessus | |
| GLSA-201006-12 : Fetchmail: Multiple vulnerabilities | 2 Jun 201000:00 | – | nessus | |
| Mac OS X 10.6.x < 10.6.2 Multiple Vulnerabilities | 9 Nov 200900:00 | – | nessus |
10
| Source | Link |
|---|---|
| secure1 | www.secure1.securityspace.com/smysecure/catid.html |
| bugzilla | www.bugzilla.redhat.com/show_bug.cgi |
# SPDX-FileCopyrightText: 2009 E-Soft Inc.
# Some text descriptions might be excerpted from (a) referenced
# source(s), and are Copyright (C) by the respective right holder(s).
#
# SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only
if(description)
{
script_oid("1.3.6.1.4.1.25623.1.0.64818");
script_version("2025-01-13T08:32:03+0000");
script_tag(name:"last_modification", value:"2025-01-13 08:32:03 +0000 (Mon, 13 Jan 2025)");
script_tag(name:"creation_date", value:"2009-09-09 02:15:49 +0200 (Wed, 09 Sep 2009)");
script_cve_id("CVE-2009-2666");
script_tag(name:"cvss_base", value:"6.4");
script_tag(name:"cvss_base_vector", value:"AV:N/AC:L/Au:N/C:P/I:P/A:N");
script_name("Fedora Core 10 FEDORA-2009-8770 (fetchmail)");
script_category(ACT_GATHER_INFO);
script_copyright("Copyright (C) 2009 E-Soft Inc.");
script_family("Fedora Local Security Checks");
script_tag(name:"insight", value:"Update Information:
If fetchmail is running in daemon mode, it must be restarted for this update to
take effect (use the fetchmail --quit command to stop the fetchmail process).
ChangeLog:
* Wed Aug 19 2009 Vitezslav Crhonek - 6.3.8-9
- Fix SSL null terminator bypass (CVE-2009-2666)");
script_tag(name:"solution", value:"Apply the appropriate updates.
This update can be installed with the yum update program. Use
su -c 'yum update fetchmail' at the command line.");
script_xref(name:"URL", value:"https://secure1.securityspace.com/smysecure/catid.html?in=FEDORA-2009-8770");
script_tag(name:"summary", value:"The remote host is missing an update to fetchmail
announced via advisory FEDORA-2009-8770.
Note: This VT has been deprecated and is therefore no longer functional.");
script_tag(name:"qod_type", value:"package");
script_tag(name:"solution_type", value:"VendorFix");
script_xref(name:"URL", value:"https://bugzilla.redhat.com/show_bug.cgi?id=515804");
script_tag(name:"deprecated", value:TRUE);
exit(0);
}
exit(66);
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
13 Jan 2025 00:00Current
6.1Medium risk
Vulners AI Score6.1
CVSS 26.4
EPSS0.01503