Fetchmail SSL证书显示远程堆溢出漏洞

BUGTRAQ ID: 38088 Fetchmail是免费的软件包，可以从远程POP2、POP3、IMAP、ETRN或ODMR服务器检索邮件并将其转发给本地SMTP、LMTP服务器或消息传送代理。 以verbose模式运行的fetchmail会向用户显示X.509证书的标题和发布者信息，为此要计算并分配一个malloc缓冲区。如果所要显示的内容包含有设置了高位的字符且平台将char类型设置为有符型，由于不可打印字符转义为了\xFF..FFnn（nn为十六进制的80..FF），这可能会在sdump.c文件的sdump函数中触发堆溢出，导致执行任意代码。 Eric Raymond...

fetchmail -- heap overflow on verbose X.509 display

Matthias Andree reports: In verbose mode, fetchmail prints X.509 certificate subject and issuer information to the user, and counts and allocates a malloc buffer for that purpose. If the material to be displayed contains characters with high bit set and the platform treats the "char" type as...

Mandriva Update for fetchmail MDVA-2010:018 (fetchmail)

Check for the Version of fetchmail OpenVAS Vulnerability Test Mandriva Update for fetchmail MDVA-2010:018 fetchmail Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Mandriva Update for fetchmail MDVA-2010:018 (fetchmail)

Check for the Version of fetchmail OpenVAS Vulnerability Test Mandriva Update for fetchmail MDVA-2010:018 fetchmail Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Security fix for the ALT Linux 5 package fetchmail version 6.3.13-alt1

Jan. 1, 2010 Afanasov Dmitry 6.3.13-alt1 - 6.3.13 + new "softbounce" global option; + CVE-2009-2666: improper SSL/TLS X.509 certificates validation fixed in 6.3.11; + translation updates; see NEWS for details...

Security fix for the ALT Linux 6 package fetchmail version 6.3.13-alt1

Jan. 1, 2010 Afanasov Dmitry 6.3.13-alt1 - 6.3.13 + new "softbounce" global option; + CVE-2009-2666: improper SSL/TLS X.509 certificates validation fixed in 6.3.11; + translation updates; see NEWS for details...

Mandriva Security Advisory MDVSA-2009:201-1 (fetchmail)

The remote host is missing an update to fetchmail announced via advisory MDVSA-2009:201-1. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...

Mandriva Security Advisory MDVSA-2009:201-1 (fetchmail)

The remote host is missing an update to fetchmail announced via advisory MDVSA-2009:201-1. OpenVAS Vulnerability Test $Id: mdksa20092011.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:201-1 fetchmail Authors: Thomas Reinke Copyright: Copyright c 200...

Mac OS X 10.6 < 10.6.2 Multiple Vulnerabilities

Binary data 800795.prm...

Mac OS X Multiple Vulnerabilities (Security Update 2009-006)

The remote host is running a version of Mac OS X 10.5 that does not have Security Update 2009-006 applied. This security update contains fixes for the following products : - AFP Client - Adaptive Firewall - Apache - Apache Portable Runtime - ATS - Certificate Assistant - CoreGraphics - CUPS -...

Mac OS X 10.6.x < 10.6.2 Multiple Vulnerabilities

The remote host is running a version of Mac OS X 10.6.x that is prior to 10.6.2. Mac OS X 10.6.2 contains security fixes for the following products : - Adaptive Firewall - Apache - Apache Portable Runtime - Certificate Assistant - CoreMedia - CUPS - Dovecot - fetchmail - file - FTP Server - Help...

SLES10: Security update for fetchmail

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: fetchmail fetchmailconf More details may also be found by searching for the SuSE Enterprise Server 10 patch database located at...

SLES10: Security update for fetchmail

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: fetchmail fetchmailconf More details may also be found by searching for the SuSE Enterprise Server 10 patch database located at...

SLES10: Security update for fetchmail

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: fetchmail fetchmailconf More details may also be found by searching for the SuSE Enterprise Server 10 patch database linked in the references...

SLES10: Security update for fetchmail

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: fetchmail fetchmailconf More details may also be found by searching for the SuSE Enterprise Server 10 patch database linked in the references...

SLES11: Security update for fetchmail

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: fetchmail fetchmailconf More details may also be found by searching for the SuSE Enterprise Server 11 patch database linked in the references...

SLES11: Security update for fetchmail

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: fetchmail fetchmailconf More details may also be found by searching for the SuSE Enterprise Server 11 patch database located at...

SLES9: Security update for fetchmail

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: fetchmail For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5012536 within the...

SLES9: Security update for fetchmail

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: fetchmail For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5012567 within the...

SLES9: Security update for fetchmail

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: fetchmail For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5012567 within the...