Ubuntu 6.06 LTS / 6.10 / 7.04 : fetchmail vulnerabilities (USN-520-1)

Gaetan Leurent discovered a vulnerability in the APOP protocol based on MD5 collisions. As fetchmail supports the APOP protocol, this vulnerability can be used by attackers to discover a portion of the APOP user's authentication credentials. CVE-2007-1558 Earl Chew discovered that fetchmail can b...

Fedora 7 : fetchmail-6.3.7-2.fc7 (2007-1983)

Mon Sep 3 2007 Vitezslav Crhonek - 6.3.7-2 - Fix license - Fix fetchmail NULL pointer dereference CVE-2007-4565 Resolves: 260861 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically...

openSUSE 10 Security Update : fetchmail (fetchmail-4490)

This update fixes a remote denial-of-service attack. CVE-2007-4565 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update fetchmail-4490. The text description of this plugin is C SUSE LLC...

openSUSE 10 Security Update : fetchmail (fetchmail-2602)

Three security issues have been fixed in fetchmail : CVE-2005-4348: fetchmail when configured for multidrop mode, allows remote attackers to cause a denial of service application crash by sending messages without headers from upstream mail servers. CVE-2006-5867: fetchmail did not properly enforc...

USN-520-1: fetchmail vulnerabilities

Gaetan Leurent discovered a vulnerability in the APOP protocol based on MD5 collisions. As fetchmail supports the APOP protocol, this vulnerability can be used by attackers to discover a portion of the APOP user's authentication credentials. CVE-2007-1558 Earl Chew discovered that fetchmail can b...

Debian DSA-1377-2 : fetchmail - NULL pointer dereference

Matthias Andree discovered that fetchmail, an SSL enabled POP3, APOP and IMAP mail gatherer/forwarder, can under certain circumstances attempt to dereference a NULL pointer and crash. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

[SECURITY] [DSA 1377-2] New fetchmail packages fix denial of service

------------------------------------------------------------------------ Debian Security Advisory DSA-1377-2 [email protected] http://www.debian.org/security/ Steve Kemp September 21, 2007 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1377-1] New fetchmail packages fix denial of service

------------------------------------------------------------------------ Debian Security Advisory DSA-1377 [email protected] http://www.debian.org/security/ Steve Kemp September 21, 2007 http://www.debian.org/security/faq -...

DSA-1377-2 fetchmail - null pointer dereference

Bulletin has no description...

Mandrake Linux Security Advisory : fetchmail (MDKSA-2007:179)

A vulnerability in fetchmail was found where it could crash when attempting to deliver an internal warning or error message through an untrusted or compromised SMTP server, leading to a denial of service. Updated packages have been patched to prevent these issues. %NASLMINLEVEL 70300 C Tenable...

rPSA-2007-0178-1 fetchmail

rPath Security Advisory: 2007-0178-1 Published: 2007-09-05 Products: rPath Linux 1 Rating: Minor Exposure Level Classification: Indirect User Non-deterministic Denial of Service Updated Versions: fetchmail=/conary.rpath.com@rpl:devel//1/6.3.8-0.3-1 References: https://vulners.com/cve/CVE-2007-456...

Fetchmail mail delivery DoS

DoS on delivering mail report thorugh SMTP server...

Fetchmail无效警告消息本地拒绝服务漏洞

BUGTRAQ ID: 25495 CVECAN ID: CVE-2007-4565 Fetchmail是免费的软件包，可以从远程POP2、POP3、IMAP、ETRN或ODMR服务器检索邮件并将其转发给本地SMTP、LMTP服务器或消息传送代理。...

Security fix for the ALT Linux 5 package fetchmail version 6.3.8-alt4

Sept. 5, 2007 Michael Shigorin 6.3.8-alt4 - added patch from fetchmail-SA-2007-02 fixing CVE-2007-4565: NULL pointer dereference trigged by outside circumstances...

Security fix for the ALT Linux 6 package fetchmail version 6.3.8-alt4

Sept. 5, 2007 Michael Shigorin 6.3.8-alt4 - added patch from fetchmail-SA-2007-02 fixing CVE-2007-4565: NULL pointer dereference trigged by outside circumstances...

FreeBSD : fetchmail -- denial of service on reject of local warning message (45500f74-5947-11dc-87c1-000e2e5785ad)

Matthias Andree reports : fetchmail will generate warning messages in certain circumstances for instance, when leaving oversized messages on the server or login to the upstream fails and send them to the local postmaster or the user running it. If this warning message is then refused by the SMTP...

Fedora Core 6 : fetchmail-6.3.6-3.fc6 (2007-689)

Mon Sep 3 2007 Vitezslav Crhonek - 6.3.6-3 - Fix license - Fix fetchmail NULL pointer dereference CVE-2007-4565 Resolves: 260881 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically...

[SECURITY] Fedora 7 Update: fetchmail-6.3.7-2.fc7

Fetchmail is a remote mail retrieval and forwarding utility intended for use over on-demand TCP/IP links, like SLIP or PPP connections. Fetchmail supports every remote-mail protocol currently in use on the Internet POP2, POP3, RPOP, APOP, KPOP, all IMAPs, ESMTP ETRN, IPv6, and IPSEC for retrieval...

[SECURITY] Fedora Core 6 Update: fetchmail-6.3.6-3.fc6

Fetchmail is a remote mail retrieval and forwarding utility intended for use over on-demand TCP/IP links, like SLIP or PPP connections. Fetchmail supports every remote-mail protocol currently in use on the Internet POP2, POP3, RPOP, APOP, KPOP, all IMAPs, ESMTP ETRN, IPv6, and IPSEC for retrieval...

CVE-2007-4565

sink.c in fetchmail before 6.3.9 allows context-dependent attackers to cause a denial of service NULL dereference and application crash by refusing certain warning messages that are sent over SMTP...