GLSA-201006-12 : Fetchmail: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201006-12 Fetchmail: Multiple vulnerabilities Multiple vulnerabilities have been reported in Fetchmail: The sdump function might trigger a heap-based buffer overflow during the escaping of non-printable characters with the high bi...

Fetchmail: Multiple vulnerabilities

Background Fetchmail is a remote mail retrieval and forwarding utility. Description Multiple vulnerabilities have been reported in Fetchmail: The sdump function might trigger a heap-based buffer overflow during the escaping of non-printable characters with the high bit set from an X.509 certifica...

[slackware-security] fetchmail

New fetchmail packages are available for Slackware 8.1, 9.0, 9.1, 10.0, 10.1, 10.2, 11.0, 12.0, 12.1, 12.2, 13.0, and -current to fix a security issue. Here are the details from the Slackware 13.0 ChangeLog: patches/packages/fetchmail-6.3.17-i486-1slack13.0.txz: Upgraded. A crafted header or POP3...

Slackware 10.0 / 10.1 / 10.2 / 11.0 / 12.0 / 12.1 / 12.2 / 13.0 / 8.1 / 9.0 / 9.1 / current : fetchmail (SSA:2010-136-01)

New fetchmail packages are available for Slackware 8.1, 9.0, 9.1, 10.0, 10.1, 10.2, 11.0, 12.0, 12.1, 12.2, 13.0, and -current to fix a security issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Securit...

Mac OS X Security Update 2009-001

The remote host is missing Security Update 2009-001. SPDX-FileCopyrightText: 2010 LSS Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...

fetchmail security announcement fetchmail-SA-2010-02 (CVE-2010-1167)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 fetchmail-SA-2010-02: Denial of service in debug mode w/ multichar locales Topics: Denial of service in debug output Author: Matthias Andree Version: 1.0 Announced: 2010-05-06 Type: Unbounded allocation of memory until exhaustion Impact: Denial of...

Security fix for the ALT Linux 6 package fetchmail version 6.3.17-alt1

May 9, 2010 Andrey Rahmatullin 6.3.17-alt1 - 6.3.17 + CVE-2010-1167: DoS in debug mode with multichar locales...

Security fix for the ALT Linux 5 package fetchmail version 6.3.17-alt1

May 9, 2010 Andrey Rahmatullin 6.3.17-alt1 - 6.3.17 + CVE-2010-1167: DoS in debug mode with multichar locales...

DEBIAN-CVE-2010-1167

fetchmail 4.6.3 through 6.3.16, when debug mode is enabled, does not properly handle invalid characters in a multi-character locale, which allows remote attackers to cause a denial of service memory consumption and application crash via a crafted 1 message header or 2 POP3 UIDL list...

CVE-2010-1167

fetchmail 4.6.3 through 6.3.16, when debug mode is enabled, does not properly handle invalid characters in a multi-character locale, which allows remote attackers to cause a denial of service memory consumption and application crash via a crafted 1 message header or 2 POP3 UIDL list...

CVE-2010-1167

fetchmail 4.6.3 through 6.3.16, when debug mode is enabled, does not properly handle invalid characters in a multi-character locale, which allows remote attackers to cause a denial of service memory consumption and application crash via a crafted 1 message header or 2 POP3 UIDL list...

Code injection

fetchmail 4.6.3 through 6.3.16, when debug mode is enabled, does not properly handle invalid characters in a multi-character locale, which allows remote attackers to cause a denial of service memory consumption and application crash via a crafted 1 message header or 2 POP3 UIDL list...

CVE-2010-1167

fetchmail 4.6.3 through 6.3.16, when debug mode is enabled, does not properly handle invalid characters in a multi-character locale, which allows remote attackers to cause a denial of service memory consumption and application crash via a crafted 1 message header or 2 POP3 UIDL list...

CVE-2010-1167

fetchmail 4.6.3 through 6.3.16, when debug mode is enabled, does not properly handle invalid characters in a multi-character locale, which allows remote attackers to cause a denial of service memory consumption and application crash via a crafted 1 message header or 2 POP3 UIDL list...

CVE-2010-1167

fetchmail 4.6.3 through 6.3.16, when debug mode is enabled, does not properly handle invalid characters in a multi-character locale, which allows remote attackers to cause a denial of service memory consumption and application crash via a crafted 1 message header or 2 POP3 UIDL list...

CVE-2010-1167

CVE-2010-1167 affects fetchmail 4.6.3–6.3.16. When debug mode is enabled, improper handling of invalid characters in a multi-character locale allows remote denial of service via crafted (1) message header or (2) POP3 UIDL list, causing memory consumption and application crash. OpenVAS/Mandriva re...

CVE-2010-1167: Improper Input Validation

fetchmail 4.6.3 through 6.3.16, when debug mode is enabled, does not properly handle invalid characters in a multi-character locale, which allows remote attackers to cause a denial of service memory consumption and application crash via a crafted 1 message header or 2 POP3 UIDL list...

FreeBSD Ports: fetchmail

The remote host is missing an update to the system as announced in the referenced advisory. VID 09910d76-4c82-11df-83fb-0015587e2cc1 OpenVAS Vulnerability Test $ Description: Auto generated from VID 09910d76-4c82-11df-83fb-0015587e2cc1 Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft Inc...

FreeBSD Ports: fetchmail

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2010 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

FreeBSD : fetchmail -- denial of service vulnerability (09910d76-4c82-11df-83fb-0015587e2cc1)

Fetchmail developer Matthias Andree reported a vulnerability that allows remote attackers to crash the application when it is runs in verbose mode. Fetchmail before release 6.3.17 did not properly sanitize external input mail headers and UID. When a multi-character locale such as UTF-8 was in use...