FreeBSD Ports: fetchmail

The remote host is missing an update to the system as announced in the referenced advisory. VID 168190df-3e9a-11dd-87bc-000ea69a5213 OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

[slackware-security] fetchmail

New fetchmail packages are available for Slackware 8.1, 9.0, 9.1, 10.0, 10.1, 10.2, 11.0, 12.0, 12.1, and -current to fix security issues. More details about this issue may be found in the Common Vulnerabilities and Exposures CVE database: https://vulners.com/cve/CVE-2008-2711 Here are the detail...

fetchmail security announcement fetchmail-SA-2008-01 (CVE-2008-2711)

fetchmail-SA-2008-01: Crash on large log messages in verbose mode Topics: Crash in large log messages in verbose mode. Author: Matthias Andree Version: 1.0 Announced: 2008-06-17 Type: Dereferencing garbage pointer trigged by outside circumstances Impact: denial of service possible Danger: low CVS...

CVE-2008-2711

fetchmail 6.3.8 and earlier, when running in -v -v aka verbose mode, allows remote attackers to cause a denial of service crash and persistent mail failure via a malformed mail message with long headers, which triggers an erroneous dereference when using vsnprintf to format log messages...

CVE-2008-2711

CVE-2008-2711 affects fetchmail versions 6.3.8 and earlier. In verbose log mode, a malformed mail message with long headers can trigger an erroneous dereference during log formatting (vsnprintf), causing a remote denial of service via a crash and resulting persistent mail failure. Connected advis...

CVE-2004-2711

CVE-2004-2711 affects Gyach Enhanced (Gyach-E) prior to 1.0.2. The issue is described as multiple buffer overflows in avatar retrieval logic that can allow a remote attacker to crash the application or potentially execute arbitrary code. The connected sources confirm the affected product/version ...

TinyIdentD 2.2 Stack Buffer Overflow

This module exploits a stack based buffer overflow in TinyIdentD version 2.2. If we send a long string to the ident service we can overwrite the return address and execute arbitrary code. Credit to Maarten Boone. This module requires Metasploit: https://metasploit.com/download Current source:...

CVE-2007-2711

The CVE-2007-2711 entry concerns TinyIdentD up to version 2.2, where a stack-based buffer overflow is triggered by sending a long string to the ident service on TCP port 113. This allows remote code execution and affects affected builds listed as 2.2 and earlier. Public references (Exploit-DB, Me...

CVE-2006-2711

Secure Elements Class 5 AVR aka C5 EVM 2.8.1 and earlier, and possibly later 2.8.x releases, uses the same initialization vector and key for each message session, which allows remote attackers to obtain potentially sensitive information about messages...

CVE-2006-2711

CVE-2006-2711 affects Secure Elements Class 5 AVR (C5 EVM) version 2.8.1 and earlier (and possibly later 2.8.x), where the same initialization vector (IV) and key are reused for each message session. This is the underlying root cause stated in the CVE description, enabling remote attackers over a...

CVE-2005-2711

ISS BlackIce 3.6 and related products (BlackICE PC Protection, BlackICE Server Protection, BlackICE Agent for Server, RealSecure Desktop 3.6/7.0) are affected by a local privilege escalation vulnerability. The root cause is that the Application Protection module does not drop privileges before la...

phpPGAds/phpAdNew < 2.0.5 adframe.php refresh Parameter XSS

Binary data 2711.prm...

CVE-2004-2711

Multiple buffer overflows in Gyach Enhanced Gyach-E before 1.0.2 allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via vectors related to "avatar retrieval."...