Mandrake Linux Security Advisory : fetchmail (MDKSA-2005:236)

Fetchmail before 6.3.1 and before 6.2.5.5, when configured for multidrop mode, allows remote attackers to cause a DoS application crash by sending messages without headers from upstream mail servers. The updated packages have been patched to correct this problem. %NASLMINLEVEL 70300 C Tenable...

[SECURITY] [DSA 939-1] New fetchmail packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 939-1 [email protected] http://www.debian.org/security/ Martin Schulze January 13th, 2006 http://www.debian.org/security/faq -...

[SECURITY] [DSA 939-1] New fetchmail packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 939-1 [email protected] http://www.debian.org/security/ Martin Schulze January 13th, 2006 http://www.debian.org/security/faq -...

DSA-939-1 fetchmail - programming error

Bulletin has no description...

USN-233-1: fetchmail vulnerability

Steve Fosdick discovered a remote Denial of Service vulnerability in fetchmail. When using fetchmail in 'multidrop' mode, a malicious email server could cause a crash by sending an email without any headers. Since fetchmail is commonly called automatically with cron, for example, this crash could...

Fedora Core 3 : fetchmail-6.2.5.5-1.fc3 (2005-1186)

Fetchmail contains a bug where when running in multidrop mode, a malicious mail server can crash the client by sending a message without headers. This update fixes the issue. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisor...

Fedora Core 4 : fetchmail-6.2.5.5-1.fc4 (2005-1187)

Fetchmail contains a bug where when running in multidrop mode, a malicious mail server can crash the client by sending a message without headers. This update fixes the issue. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisor...

CVE-2005-4348

fetchmail before 6.3.1 and before 6.2.5.5, when configured for multidrop mode, allows remote attackers to cause a denial of service application crash by sending messages without headers from upstream mail servers...

CVE-2005-4348

fetchmail before 6.3.1 and before 6.2.5.5, when configured for multidrop mode, allows remote attackers to cause a denial of service application crash by sending messages without headers from upstream mail servers...

DEBIAN-CVE-2005-4348

fetchmail before 6.3.1 and before 6.2.5.5, when configured for multidrop mode, allows remote attackers to cause a denial of service application crash by sending messages without headers from upstream mail servers...

CVE-2005-4348

fetchmail before 6.3.1 and before 6.2.5.5, when configured for multidrop mode, allows remote attackers to cause a denial of service application crash by sending messages without headers from upstream mail servers...

CVE-2005-4348

CVE-2005-4348 affects fetchmail in multidrop mode. Multiple connected advisories (Debian DSA-939-1, SLES9 update, Slackware SSA, FreeBSD ports) confirm a denial-of-service condition where a remote attacker can crash the process by sending a message without headers from upstream servers. The root ...

CVE-2005-4348

fetchmail before 6.3.1 and before 6.2.5.5, when configured for multidrop mode, allows remote attackers to cause a denial of service application crash by sending messages without headers from upstream mail servers...

CVE-2005-4348

fetchmail before 6.3.1 and before 6.2.5.5, when configured for multidrop mode, allows remote attackers to cause a denial of service application crash by sending messages without headers from upstream mail servers...

fetchmail -- null pointer dereference in multidrop mode with headerless email

The fetchmail team reports: Fetchmail contains a bug that causes an application crash when fetchmail is configured for multidrop mode and the upstream mail server sends a message without headers. As fetchmail does not record this message as "previously fetched", it will crash with the same messag...

[SECURITY] [DSA 900-3] New fetchmail-ssl packages fix potential information leak

-------------------------------------------------------------------------- Debian Security Advisory DSA 900-3 [email protected] http://www.debian.org/security/ Martin Schulze November 22nd, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 900-3] New fetchmail-ssl packages fix potential information leak

-------------------------------------------------------------------------- Debian Security Advisory DSA 900-3 [email protected] http://www.debian.org/security/ Martin Schulze November 22nd, 2005 http://www.debian.org/security/faq -...

DSA-900-3 fetchmail - programming error

Bulletin has no description...

[SECURITY] [DSA 900-2] New fetchmail packages fix potential information leak

-------------------------------------------------------------------------- Debian Security Advisory DSA 900-2 [email protected] http://www.debian.org/security/ Martin Schulze November 21st, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 900-2] New fetchmail packages fix potential information leak

-------------------------------------------------------------------------- Debian Security Advisory DSA 900-2 [email protected] http://www.debian.org/security/ Martin Schulze November 21st, 2005 http://www.debian.org/security/faq -...