938 matches found
Heap overflow
The sdump function in sdump.c in fetchmail 6.3.11, 6.3.12, and 6.3.13, when running in verbose mode on platforms for which char is signed, allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via an SSL X.509 certificate containing non-printabl...
CVE-2010-0562
The CVE-2010-0562 issue affects fetchmail 6.3.11–6.3.13, where the sdump() function in sdump.c can overflow a heap buffer when in verbose mode on platforms with signed char. An attacker could exploit an X.509 certificate whose non‑printable high‑bit characters trigger this overflow, potentially c...
CVE-2010-0562
The sdump function in sdump.c in fetchmail 6.3.11, 6.3.12, and 6.3.13, when running in verbose mode on platforms for which char is signed, allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via an SSL X.509 certificate containing non-printabl...
CVE-2010-0562
The sdump function in sdump.c in fetchmail 6.3.11, 6.3.12, and 6.3.13, when running in verbose mode on platforms for which char is signed, allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via an SSL X.509 certificate containing non-printabl...
CVE-2010-0562: Improper Restriction of Operations within the Bounds of a Memory Buffer
The sdump function in sdump.c in fetchmail 6.3.11, 6.3.12, and 6.3.13, when running in verbose mode on platforms for which char is signed, allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via an SSL X.509 certificate containing non-printabl...
Fetchmail SSL证书显示远程堆溢出漏洞
BUGTRAQ ID: 38088 Fetchmail是免费的软件包，可以从远程POP2、POP3、IMAP、ETRN或ODMR服务器检索邮件并将其转发给本地SMTP、LMTP服务器或消息传送代理。 以verbose模式运行的fetchmail会向用户显示X.509证书的标题和发布者信息，为此要计算并分配一个malloc缓冲区。如果所要显示的内容包含有设置了高位的字符且平台将char类型设置为有符型，由于不可打印字符转义为了\xFF..FFnn（nn为十六进制的80..FF），这可能会在sdump.c文件的sdump函数中触发堆溢出，导致执行任意代码。 Eric Raymond...
fetchmail -- heap overflow on verbose X.509 display
Matthias Andree reports: In verbose mode, fetchmail prints X.509 certificate subject and issuer information to the user, and counts and allocates a malloc buffer for that purpose. If the material to be displayed contains characters with high bit set and the platform treats the "char" type as...
Mandriva Update for fetchmail MDVA-2010:018 (fetchmail)
Check for the Version of fetchmail OpenVAS Vulnerability Test Mandriva Update for fetchmail MDVA-2010:018 fetchmail Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...
Mandriva Update for fetchmail MDVA-2010:018 (fetchmail)
Check for the Version of fetchmail OpenVAS Vulnerability Test Mandriva Update for fetchmail MDVA-2010:018 fetchmail Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...
Security fix for the ALT Linux 6 package fetchmail version 6.3.13-alt1
Jan. 1, 2010 Afanasov Dmitry 6.3.13-alt1 - 6.3.13 + new "softbounce" global option; + CVE-2009-2666: improper SSL/TLS X.509 certificates validation fixed in 6.3.11; + translation updates; see NEWS for details...
Security fix for the ALT Linux 5 package fetchmail version 6.3.13-alt1
Jan. 1, 2010 Afanasov Dmitry 6.3.13-alt1 - 6.3.13 + new "softbounce" global option; + CVE-2009-2666: improper SSL/TLS X.509 certificates validation fixed in 6.3.11; + translation updates; see NEWS for details...
Mandriva Security Advisory MDVSA-2009:201-1 (fetchmail)
The remote host is missing an update to fetchmail announced via advisory MDVSA-2009:201-1. OpenVAS Vulnerability Test $Id: mdksa20092011.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:201-1 fetchmail Authors: Thomas Reinke Copyright: Copyright c 200...
Mandriva Security Advisory MDVSA-2009:201-1 (fetchmail)
The remote host is missing an update to fetchmail announced via advisory MDVSA-2009:201-1. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...
Mac OS X 10.6 < 10.6.2 Multiple Vulnerabilities
Binary data 800795.prm...
Mac OS X 10.6.x < 10.6.2 Multiple Vulnerabilities
The remote host is running a version of Mac OS X 10.6.x that is prior to 10.6.2. Mac OS X 10.6.2 contains security fixes for the following products : - Adaptive Firewall - Apache - Apache Portable Runtime - Certificate Assistant - CoreMedia - CUPS - Dovecot - fetchmail - file - FTP Server - Help...
Mac OS X Multiple Vulnerabilities (Security Update 2009-006)
The remote host is running a version of Mac OS X 10.5 that does not have Security Update 2009-006 applied. This security update contains fixes for the following products : - AFP Client - Adaptive Firewall - Apache - Apache Portable Runtime - ATS - Certificate Assistant - CoreGraphics - CUPS -...
SLES10: Security update for fetchmail
The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: fetchmail fetchmailconf More details may also be found by searching for the SuSE Enterprise Server 10 patch database linked in the references...
SLES10: Security update for fetchmail
The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: fetchmail fetchmailconf More details may also be found by searching for the SuSE Enterprise Server 10 patch database linked in the references...
SLES10: Security update for fetchmail
The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: fetchmail fetchmailconf More details may also be found by searching for the SuSE Enterprise Server 10 patch database located at...
SLES10: Security update for fetchmail
The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: fetchmail fetchmailconf More details may also be found by searching for the SuSE Enterprise Server 10 patch database located at...