CVE-2006-0321

fetchmail 6.3.0 and other versions before 6.3.2 allows remote attackers to cause a denial of service crash via crafted e-mail messages that cause a free of an invalid pointer when fetchmail bounces the message to the originator or local postmaster...

CVE-2006-0321

Summary: CVE-2006-0321 affects fetchmail 6.3.0 and older versions before 6.3.2. An attacker can remotely trigger a denial of service by sending crafted messages that cause fetchmail to free an invalid pointer during bounce handling to the originator or local postmaster. Root cause: erroneous free...

FetchMail mail processor DoS

Error on bounce message generation cause uninitialized memory reference...

CVE-2006-0321

fetchmail 6.3.0 and other versions before 6.3.2 allows remote attackers to cause a denial of service crash via crafted e-mail messages that cause a free of an invalid pointer when fetchmail bounces the message to the originator or local postmaster...

CVE-2006-0321

fetchmail 6.3.0 and other versions before 6.3.2 allows remote attackers to cause a denial of service crash via crafted e-mail messages that cause a free of an invalid pointer when fetchmail bounces the message to the originator or local postmaster...

[VulnWatch] fetchmail security announcement fetchmail-SA-2006-01 (CVE-2006-0321)

fetchmail-SA-2006-01: crash when bouncing messages. Topics: 1 crash when bouncing a message 2 fetchmail 6.2.5.X end of life Author: Matthias Andree Version: 1.0 Announced: 2006-01-22 Type: free with bogus pointer Impact: fetchmail crashes Danger: low Credits: Nathaniel W. Turner bug report CVE...

CVE-2006-0321: Improper Input Validation

fetchmail 6.3.0 and other versions before 6.3.2 allows remote attackers to cause a denial of service crash via crafted e-mail messages that cause a free of an invalid pointer when fetchmail bounces the message to the originator or local postmaster...

[SA18571] Fetchmail Bounced Message Denial of Service Vulnerability

TITLE: Fetchmail Bounced Message Denial of Service Vulnerability SECUNIA ADVISORY ID: SA18571 VERIFY ADVISORY: http://secunia.com/advisories/18571/ CRITICAL: Moderately critical IMPACT: DoS WHERE: From remote SOFTWARE: Fetchmail 6.x http://secunia.com/product/370/ DESCRIPTION: A vulnerability has...

fetchmail -- crash when bouncing a message

Matthias Andree reports: Fetchmail contains a bug that causes itself to crash when bouncing a message to the originator or to the local postmaster. The crash happens after the bounce message has been sent, when fetchmail tries to free the dynamic array of failed addresses, and calls the free...

Ubuntu 4.10 / 5.04 / 5.10 : fetchmail vulnerability (USN-233-1)

Steve Fosdick discovered a remote Denial of Service vulnerability in fetchmail. When using fetchmail in 'multidrop' mode, a malicious email server could cause a crash by sending an email without any headers. Since fetchmail is commonly called automatically with cron, for example, this crash could...

Ubuntu 4.10 / 5.04 / 5.10 : fetchmail vulnerability (USN-215-1)

Thomas Wolff and Miloslav Trmac discovered a race condition in the fetchmailconf program. The output configuration file was initially created with insecure permissions, and secure permissions were applied after writing the configuration into the file. During this time, the file was world readable...

Mandrake Linux Security Advisory : fetchmail (MDKSA-2005:236)

Fetchmail before 6.3.1 and before 6.2.5.5, when configured for multidrop mode, allows remote attackers to cause a DoS application crash by sending messages without headers from upstream mail servers. The updated packages have been patched to correct this problem. %NASLMINLEVEL 70300 C Tenable...

Ubuntu 4.10 / 5.04 : fetchmail vulnerability (USN-153-1)

Ross Boylan discovered a remote buffer overflow in fetchmail. By sending invalid responses with very long UIDs, a faulty or malicious POP server could crash fetchmail or execute arbitrary code with the privileges of the user invoking fetchmail. fetchmail is commonly run as root to fetch mail for...

[SECURITY] [DSA 939-1] New fetchmail packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 939-1 [email protected] http://www.debian.org/security/ Martin Schulze January 13th, 2006 http://www.debian.org/security/faq -...

[SECURITY] [DSA 939-1] New fetchmail packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 939-1 [email protected] http://www.debian.org/security/ Martin Schulze January 13th, 2006 http://www.debian.org/security/faq -...

DSA-939-1 fetchmail - programming error

Bulletin has no description...

USN-233-1: fetchmail vulnerability

Steve Fosdick discovered a remote Denial of Service vulnerability in fetchmail. When using fetchmail in 'multidrop' mode, a malicious email server could cause a crash by sending an email without any headers. Since fetchmail is commonly called automatically with cron, for example, this crash could...

Fedora Core 3 : fetchmail-6.2.5.5-1.fc3 (2005-1186)

Fetchmail contains a bug where when running in multidrop mode, a malicious mail server can crash the client by sending a message without headers. This update fixes the issue. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisor...

Fedora Core 4 : fetchmail-6.2.5.5-1.fc4 (2005-1187)

Fetchmail contains a bug where when running in multidrop mode, a malicious mail server can crash the client by sending a message without headers. This update fixes the issue. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisor...

CVE-2005-4348

fetchmail before 6.3.1 and before 6.2.5.5, when configured for multidrop mode, allows remote attackers to cause a denial of service application crash by sending messages without headers from upstream mail servers...