Lucene search

K
osvGoogleOSV:DSA-1377-2
HistorySep 21, 2007 - 12:00 a.m.

fetchmail - null pointer dereference

2007-09-2100:00:00
Google
osv.dev
7

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

Matthias Andree discovered that fetchmail, an SSL enabled POP3, APOP
and IMAP mail gatherer/forwarder, can under certain circumstances
attempt to dereference a NULL pointer and crash.

For the old stable distribution (sarge), this problem was not present.

For the stable distribution (etch), this problem has been fixed in
version 6.3.6-1etch1.

For the unstable distribution (sid), this problem will be fixed soon.

We recommend that you upgrade your fetchmail package.

CPENameOperatorVersion
fetchmaileq6.3.6-1

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P